Google paid almost $12 million in bug bounty rewards to 660 security researchers who reported security bugs through the company's Vulnerability Reward Program (VRP) in 2024.

Rewards went to 660 security researchers who reported security bugs in Google's products throughout the company from its Vulnerability Reward Program. Microsoft also expanded its program.