Find AI security bugs for bug bounties (Google AI VRP)
Hunt for real security flaws in AI features, not jailbreaks: for example indirect prompt injections that make Gemini, Gmail or NotebookLM take an action the user didn't confirm, or leak private data to an attacker. Test only on accounts you own, write a clear report with reproduction steps and the real-world impact, and submit it through Google's Bug Hunters site. Google's AI Vulnerability Reward Program, launched in October 2025, pays the first person to report each valid bug. Jailbreaks, hallucinations, harmful-content outputs and system-prompt leaks are excluded and earn nothing.
Details
- How it works
- Hunt for real security flaws in AI features, not jailbreaks: for example indirect prompt injections that make Gemini, Gmail or NotebookLM take an action the user didn't confirm, or leak private data to an attacker. Test only on accounts you own, write a clear report with reproduction steps and the real-world impact, and submit it through Google's Bug Hunters site. Google's AI Vulnerability Reward Program, launched in October 2025, pays the first person to report each valid bug. Jailbreaks, hallucinations, harmful-content outputs and system-prompt leaks are excluded and earn nothing.
- Tools
- Google Bug Hunters, Burp Suite Community Edition, Gemini on a test account. Tool links
- Startup costs
- $0 (free to join; Burp Suite Community is free)
- Reported earnings
- Bounties, not wages: Google's AI VRP rules list $20,000 for 'rogue action' attacks on flagship products (Search, Gemini apps, core Workspace), $15,000 for sensitive-data exfiltration and $100–$5,000 for lesser classes. The amount is multiplied by 0.8–1.2x for report quality, and novelty bonuses add $1,000–$5,000. Google said its programs had paid over $430,000 for AI bugs before the dedicated program launched, and its 2025 AI bugSWAT live event paid over $400,000 for 70+ reports. Most reports are duplicates or out of scope and earn nothing.Reward table and payout totals from Google's own AI VRP rules and Google blog posts.Entry last updated · What the labels mean
Sources
A full research note (hours, startup costs and a month-by-month earnings range) for this entry is in progress.
Straight answers
Related entries
AI data annotation / model evaluation
Rate and correct AI model answers on annotation platforms, paid hourly
| Startup cost | $0 |
|---|---|
| First dollar | 1–6 weeks after applying |
| Month 12 | $300–$2,000/mo |
Record chore videos to train household robots
Film first-person chores for robot-training firms; reported $3–$25/hr
| Startup cost | $0–$30 |
|---|---|
| First dollar | 1–3 weeks |
| Month 12 | $50–$300/mo |
User testing of AI products
Test sites, apps and AI features for pay; moderated interviews pay $60–$100/hr
| Startup cost | $0 |
|---|---|
| First dollar | 1–3 weeks after joining |
| Month 12 | $100–$500/mo |