Google increases Chrome bug bounty rewards to combat AI-driven vulnerability reports

Google has announced a restructuring of its Chrome browser bug bounty program, significantly increasing rewards for security researchers. The update focuses on addressing memory safety issues and responding to a surge in automated vulnerability reports generated by artificial intelligence tools.

Under the new guidelines, the base reward for memory corruption vulnerabilities has increased fourfold, rising from $500 to $2,000. Higher-tier rewards are also available, with controllable write vulnerabilities in the browser, GPU, or network processes reaching up to $20,000. Additionally, Google has reintroduced a $2,000 reward specifically for Chrome fuzzing to encourage the development of novel testing tools.

The adjustment follows a period of volatility in the program; earlier this year, Google had drastically reduced standard payouts to prioritize high-quality, actionable alerts. The recent influx of automated reports from AI-driven tools, which often lack real-world impact or complete information, prompted the company to recalibrate its incentive and triage policies.