Google Launches Dedicated AI Bug Bounty Program with Rewards up to $30,000
8 Sources
[1]
Google will pay you up to $30,000 in rewards to find bugs in its AI products
Aaims to tackle past confusion concerning in-scope bugs and problems. Google has launched a new bug bounty program aimed at addressing security flaws and bugs in products related to artificial intelligence (AI). Also: Google just gave older smart home devices a useful upgrade for free - including
[2]
Google's AI bounty program pays bug hunters up to $30K
On Monday, Google launched a new reward program dedicated specifically to finding bugs in AI products. Google's list of qualifying bugs includes examples of the kind of rogue actions it's looking for, like indirectly injecting an AI prompt that causes Google Home to unlock a door, or a data
[3]
Google declares AI bug hunting season open
Google on Monday rolled out a new AI Vulnerability Reward Program to encourage researchers to find and report flaws in its AI systems, with rewards of up to $30,000 for a single qualifying report. In addition to a base reward of up to $20,000 for the highest-tier AI product flaw, Google adopted
[4]
Google's new AI bug bounty program pays up to $30,000 for flaws
This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems. The new bug bounty program focuses on the most impactful issues in the highest-profile AI products, including but not limited to Google Search
[5]
Google's ready to pay up to $20,000 if you can break Gemini very, very badly
Google shares new bug bounty details for AI with its Vulnerability Reward Program. It's not nice to be a bully. At least, not to people. But for a certain segment of AI "fans," there's nothing more fun than ganging up on an AI chatbot and trying to get it to do basically anything other than what's
[6]
Google launches AI bug bounties - earn up to $30,000 if you can hack Gemini
Content-based issues like hallucinations aren't covered by the VRP Google has announced a new AI Vulnerability Reward Program (VRP) for researchers focused on finding security issues and bugs in its AI tools. The news comes around two years after Google extended its Abuse VRP, which Security
[7]
Ethical hackers invited: Google launches Gemini AI bug bounty
Google has introduced an AI Vulnerability Reward Program that pays researchers for discovering critical security flaws in its Gemini AI systems. Rewards can reach up to $20,000 for severe vulnerabilities, especially those affecting major platforms such as Google Search and the Gemini app. Google
[8]
Google Launches AI Bug Bounty Program with Rewards Up to Rs. 26 Lakh
The tech giant's focus is on "rogue actions." These happen when an AI is tricked into doing something it should not. For example, AI could be made to unlock smart home devices or send private email data without permission. Not all AI mistakes will fetch rewards for bounty hunters. Only issues that
Share
Copy Link
Google introduces a new Vulnerability Reward Program specifically for AI products, offering substantial rewards for researchers who uncover critical security flaws in its AI systems. The program aims to enhance the security of Google's AI offerings while clarifying the scope of eligible vulnerabilities.
Google Unveils Dedicated AI Bug Bounty Program
Google has launched a new Artificial Intelligence Vulnerability Reward Program (AI VRP), offering substantial rewards for researchers who uncover critical security flaws in its AI systems. This standalone program, an extension of Google's existing bug bounty initiatives, aims to incentivize the discovery and reporting of high-impact abuse issues and security vulnerabilities in AI-related products and services
1
2
.Lucrative Rewards for Critical Findings
The program offers tiered rewards based on the severity and impact of the reported vulnerabilities. Researchers can earn up to $20,000 for uncovering critical flaws in Google's flagship AI products, with the potential for additional bonuses bringing the total reward to $30,000 for a single high-quality report
1
2
3
. This significant financial incentive underscores Google's commitment to enhancing the security of its AI offerings.Scope and Focus Areas
Google has clearly defined the scope of the AI VRP, categorizing potential vulnerabilities into several key areas
1
3
4
:- Rogue actions: Unauthorized modifications to user accounts or data
- Sensitive data exfiltration: Unauthorized access to private information
- Denial of service: Disrupting AI service availability
- Phishing enablement: Exploiting AI to facilitate phishing attacks
- Model theft: Unauthorized extraction of AI model details
The program primarily targets Google's flagship AI products, including Search, Gemini Apps, and core Workspace applications like Gmail and Drive
2
3
.Clarifying Eligible Vulnerabilities
In response to past confusion, Google has explicitly outlined what constitutes an in-scope bug for the AI VRP. Notably, the program excludes direct prompt injection, jailbreaks, and alignment issues, which are considered content-related problems rather than security vulnerabilities
3
4
. These issues are directed to in-product feedback channels for long-term model improvements2
.Related Stories
Impact and Future Prospects
Since expanding its bug bounties to include AI-related issues in 2023, Google has already paid out over $430,000 to researchers
1
. The launch of this dedicated AI VRP is expected to further encourage high-quality vulnerability reports, which could prove crucial as Google continues to integrate AI across its digital product suite1
4
.Broader Context of Google's Security Initiatives
This new program aligns with Google's broader security efforts. In 2024, the company awarded nearly $12 million to over 600 researchers through its various vulnerability reward programs
4
. Additionally, Google has developed an AI agent called CodeMender, which has been used to patch 72 security fixes in open-source projects after human verification2
.As AI systems become increasingly prevalent and complex, initiatives like Google's AI VRP play a vital role in identifying and mitigating potential security risks, ultimately contributing to the development of more robust and trustworthy AI technologies.
References
Summarized by
Navi
[3]
[4]
[5]
Related Stories
Google's AI Bug Hunter 'Big Sleep' Uncovers 20 Security Vulnerabilities in Open Source Software
05 Aug 2025•Technology
Apple Caps Bug Bounty Submissions as AI Bug Reports Overwhelm Security Teams
02 Aug 2026•Technology
GitHub slashes bug bounty payouts by up to 59% as AI-generated reports flood security teams
23 Jul 2026•Business and Economy
Recent Highlights
1
AI Hallucination Nearly Sparked US Military Confrontation With Chinese Ship in Middle East
Technology
2
Google Gemini Hacked Three Real Companies During Cybersecurity Testing, Raising AI Safety Concerns
Technology
3
OpenAI Claims AI Breakthrough on Navier-Stokes Problem, Sparking Math Community Crisis
Science and Research
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
