BugRater
Early access — the directory is still filling out, and every rating here is a reported experience.
Programs / Google
GO

Self-hosted security programme

Google

Google Bug Hunters ↗ ·google.com ↗

Google runs Bug Hunters, its own reporting and reward platform, covering Google, Chrome, Android and the open source it maintains. There is no profile to claim here.

Rewards are set by a panel against a published table, and the amount turns on report quality as much as severity — a clear reproduction routinely lands higher than the same bug described loosely.

Direct How to report
In-house Triage
Panel Reward decisions
Bug Hunters Where credit lands

Getting credit

Report to Google, claim it here

Credit publishes in Google’s own advisories, often months after the report. We index those, so it is waiting for you — including recognitions that carry no CVE and appear nowhere else.

Recent Google releases →

Google

Internet services · USA

google.com →

Found a vulnerability?

Google runs its own vulnerability reporting process. Here are your two ways to report it — we recommend the first.

Report a vulnerability to Google

Two ways to do this. We recommend the first.

Recommended Submit it yourself, through Google Bug Hunters Google reviews reports directly and thoroughly. Report through their own portal — then come back and claim the credit here once the advisory publishes. Open Google Bug Hunters → Ask BugRater to submit it for you Would rather not deal with the vendor directly? A BugRater analyst takes it upstream on your behalf, with your explicit permission, and tells you what came back. Start a BugRater report →

Credited on the advisory later? Claim your credit here — it is yours immediately, no review queue.

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Programs

NR Google Vulnerability Reward Program Google · Independent · up to $250,000 — 0 reviews