Google increases rewards for bug bounty programs
Google has again bumped up payouts for its web vulnerability rewards program.
Posting on its online security blog, the company made two updates to its program to increase the caps for certain vulnerabilities, as well as updating the rules for its reward program.
As a result of the changes, the reward for cross-site scripting (XSS) flaws will be bumped up, depending on what services are affected. For those on accounts.google.com, the reward has been boosted to US$7,500 from US$3,133.70. For "highly sensitive services", such as Gmail and Google Wallet, the reward is now US$5,000, up from US$1,337. Any other XSS flaws on Google's properties attract $3,133.70, an increase from the former US$500 reward.