Google's Vulnerability Reward Program (VRP) celebrated its 15th anniversary in 2025, awarding over $17 million to 700+ researchers — an all-time high and a 40%+ increase over 2024. Key highlights include the launch of a dedicated AI VRP, expanded Chrome VRP coverage for AI features, a new patch rewards program for OSV-SCALIBR, and multiple bugSWAT live hacking events in Tokyo, Sunnyvale, Las Vegas, and Mexico City. The ESCAL8 security conference was also hosted in Mexico City. Plans for 2026 include continued bugSWAT events and the next ESCAL8 edition.
Table of contents
What’s coming in 2026Sort: