Google pulls the plug on Android apps bug bounty program, here’s why

Google has revealed that it is shutting down its Google Play Security Reward Program (GPSRP), effective August 31, 2024. Launched in 2017, it was a bug bounty program that rewarded security researchers for identifying and reporting vulnerabilities in popular Android apps.

According to a report by Android Authority, Google sent an email to security researchers announcing the termination of the program. Over the years, it has played a crucial role in enhancing the security of the Google Play Store by offering rewards of up to $20,000 for critical vulnerabilities.

As per the report and the email cited, Google said that it is shutting down the program as there has been a significant improvement in security of Android and Play Store. According to Google, these advancements have led to a significant decrease in the number of actionable vulnerabilities reported by researchers.

“As a result of the overall increase in the Android OS security posture and feature hardening efforts, we’ve seen fewer actionable vulnerabilities reported by the research community. Due to this decrease in actionable vulnerabilities reported, we are winding down the GPSRP program,” Google told security researchers in the email.