- Top reward
- $13,337
- Top severity paid
- High
- Assets in scope
- 1
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- Pays up to $13,337
- for high bugs, from $100.
- Report as the policy says
- The policy page explains how.
Rewards
What the company's own policy page says it pays.
| Severity | Relative size | Reward |
|---|---|---|
| High |
|
$13,337 |
| Medium |
|
$5,000 from $100 |
| Low |
|
$1,337 from $100 |
- Top reward
-
$13,337
Rewards for abuse-related vulnerabilities range from USD $100 to $13,337.
- Lowest reward
-
$100
Rewards for abuse-related vulnerabilities range from USD $100 to $13,337.
- Hall of fame
-
Yes
Low │ $1,337 │ $100 to $500 │ HoF Credit
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
1 asset you may test.
Products and areas 1
- Any abuse risk in services under the Google VRP scope
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Google Abuse VRP's policy.
While testing
-
only ever target your own accounts
-
Never attempt to access anyone else's data
-
do not engage in any activity that would be disruptive or damaging to your fellow users or to Google
-
your testing must not violate any law, or disrupt or compromise any data that is not your own
Not accepted
-
reporting a specific business with likely fake ratings would not qualify
-
AI-related issues previously covered by the Abuse VRP are covered by the AI VRP
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 12 Nov 2026. Last checked 6 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.