Google has announced a reward program for Android system. Researchers will get paid from Google for Finding, Fixing and preventing vulnerabilities on Android System. Google has been running security reward program since 2010, and last year paid more than 1.5 million dollars to security researcher that helped to improve Google Chrome and other Google Products. Along with the new reward program Google will continue the Patch Rewards Program that pays for the contribution to improve the security of Android.
Read it in Google’s word
We’re expanding our program to include researchers that will find, fix, and prevent vulnerabilities on Android, specifically. Here are some details about the new Android Security Rewards program:
1) For vulnerabilities affecting Nexus phones and tablets available for sale on Google Play (currently Nexus 6 and Nexus 9), we will pay for each step required to fix a security bug, including patches and tests. This makes Nexus the first major line of mobile devices to offer an ongoing vulnerability rewards program.
2) In addition to rewards for vulnerabilities, our program offers even larger rewards to security researchers that invest in tests and patches that will make the entire ecosystem stronger.
3) The largest rewards are available to researchers that demonstrate how to work around Android’s platform security features, like ASLR, NX, and the sandboxing that is designed to prevent exploitation and protect users.