2015
Please note these charts are only for the year 2015, and only span the Google VRP (doesn't count Patch Reward Program, Android Reward Program nor the Chrome Reward Program).
Traffic
The graph below elaborated on the traffic we process. Note this only counts submissions to our bug submission form (not emails) in 2015.
Rewards Distribution
The graph below lays out where the money is going to according to the different reward tiers in 2015.
Countries
The map below shows the countries from where we send rewards, where size represents the average of the severity of the vulnerabilities reported in 2015.
The top countries in our program are United Kingdom, Poland, Russian Federation, United States, Romania, Brazil, Germany, Israel, Ukraine and Sweden.
Vulnerability severity
The graph below shows the distribution of vulnerability severity over time.
Researcher engagement
We sent a survey to some of our top researchers asking about frequency of bug hunting in Google and success rate.
Do you plan on continuing reporting bugs to Google?
Payment Speed
We made some changes to our processes to pay users faster, now the average time to pay for a report is 2 weeks from the time the report was first sent up to the day the researcher has the money in their bank.
