Google cites reduced bug reports as the reason for shutting down the Android security initiative launched in 2017
Google will officially shut down its Play Security Reward Programme by the end of August this year, marking the end of a significant initiative aimed at enhancing Android security. The programme, which was launched in 2017, incentivised external and third-party security researchers to discover and report critical security vulnerabilities in Android apps. These researchers were often rewarded generously for their efforts, with payouts sometimes reaching lakhs or even crores, depending on the severity of the bugs identified.
The Play Security Reward Programme was introduced at a time when Google was struggling to manage the security challenges faced by Android users and the platform as a whole. By extending its security efforts to include third-party experts, Google was able to address a broad range of vulnerabilities that might have otherwise gone unnoticed. The programme proved highly successful, as it allowed Google to promptly fix security issues before they became major problems.
Google’s Play Store hosts millions of Android apps. Despite this vast ecosystem, Google has observed a steady decline in the frequency of significant bug reports from external researchers. This decrease in external reports has been a key factor in Google’s decision to discontinue the programme. The company now feels that its internal security measures are sufficient to handle the security needs of the platform, reducing the need for external contributions.
