Cloud Vulnerability Reward Program

Google offers $250,000 bounty for root-level takeover flaws in Google Cloud

Google◼ has added a top-tier $250,000 reward to its Cloud Vulnerability Reward Program◆, called Root-in-Cloud. It covers researchers who demonstrate complete administrative takeover of arbitrary Google Cloud◆ projects or organisations without prior access, announced on 30 October. The programme focuses on architectural flaws that could compromise tenant isolation or cause harmful interactions between cloud services.