Google VRP (Google Bug Hunters)

@GoogleVRP

We ❤️ 🐜🐞🦗🦟🦋. {echo,{{{Google,Chrome,Android,Abuse,Mobile,OSS,Cloud}Vulnerability,Patch}Reward,VulnerabilityResearchGrants}Program}

bughunters.google.com

Joined March 2018

0 Following

43.4K Followers

Replies Reposts Media Articles

Google VRP (Google Bug Hunters)
@GoogleVRP
Oct 1
📢 PSA for open-source bug hunters We are temporarily no longer accepting OSS VRP product vulnerability submissions. This does not impact OSS VRP supply chain reports, or any outstanding reports. As an alternative, we encourage you to find impact across our other VRP programs
bughunters.google.com
Google Open Source Software Vulnerability Reward Program Rules | Google Bug Hunters
Get an overview of the rules governing the Google VRP and related programs, including what’s in scope and potential reward amounts.
14
Google VRP (Google Bug Hunters)
@GoogleVRP
Sep 29
Introducing PageBreak, an agentic vulnerability discovery tool using deterministic validation to achieve a near-zero false positive rate. How it works: blog.google/security/agent… For real-world vulnerabilities PageBreak has discovered 👇 bughunters.google.com/blog/pagebreak…
Agentic Hacks, Real Proofs: Inside Google's PageBreak Project
From blog.google
22
Google VRP (Google Bug Hunters)
@GoogleVRP
Sep 22
ESCAL8, Google’s annual flagship security conference, is coming to Singapore in October 2026, with a particular focus on AI Agents! 🇸🇬 Check out our blog post to see what's planned in the three main segments of the conference: bugSWAT, Hackceler8, and init.g() 👇
bughunters.google.com
Blog: ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
Google VRP (Google Bug Hunters)
@GoogleVRP
Sep 15
📢📢📢 Attention bug hunters! Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage? If yes, check out his blog post 👇
bughunters.google.com
Blog: Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
8
Google VRP (Google Bug Hunters)
@GoogleVRP
Aug 18
📢 Tracking our VRP rules just got easier! We are now mirroring our VRP rules and help articles directly on GitHub. Perfect for automating your workflows and tracking changes. 👇
GitHub - google/bughunters
From github.com
6