August 21, 2024 at 11:00AM
Google is discontinuing its Google Play Security Reward Program (GPSRP) after achieving its goal of increasing Android OS security. Bug submissions will be accepted until August 31, 2024, with final rewards decided by September 30. The program has incentivized developers to improve their app security, paying out a total of $10 million.
Based on the meeting notes, the key takeaways are:
– Google is shutting down the Google Play Security Reward Program (GPSRP) as it has achieved its goal of overall increase in Android OS security posture and feature hardening efforts.
– The program will officially be discontinued on September 30, 2024, with final reward decisions being made until that date.
– As part of the program, bug bounty hunters could earn up to $20,000 for remote code execution exploits and up to $5,000 for the theft of sensitive data without user interaction.
– Google paid out a total of $10 million through its bug bounty programs in 2023, bringing the total since 2010 to nearly $60 million.
– The announcement comes after a tenfold increase in payouts for vulnerabilities in its own mobile applications.
Let me know if you need any further information or assistance!