Google's Vulnerability Reward Program celebrated its 15th anniversary in 2025. The program awarded over $17 million to more than 700 researchers globally, a significant increase from the previous year. This highlights the value of external security research for Google's safety. A dedicated AI VRP was launched, offering clearer scope and reward details for AI-related vulnerabilities. The Chrome VRP also expanded to include rewards for AI feature issues. A patch rewards program was introduced for OSV-SCALIBR, an open-source vulnerability detection tool. Google hosted its ESCAL8 cybersecurity conference in Mexico City, featuring workshops and seminars. Multiple bugSWAT live hacking events were held throughout the year, including dedicated sessions for AI, Cloud, and Las Vegas. These events collectively resulted in numerous reports and substantial reward payouts. Looking ahead to 2026, Google remains committed to fostering community collaboration and staying ahead of emerging threats. The company expressed gratitude to its bug hunter community and encouraged new researchers to join the mission of keeping Google safe.