security-economics

Google Paid Nearly $17 Million in Bug Bounties Last Year. What That Number Actually Tells Us.

John Z Black Mar 16, 2026

Vulnerabilities & Patching #bug-bounty #google #vulnerability-management #security-economics #exploit-market

Google's record $17 million in bug bounties sounds huge. Then you look at the exploit broker market, where a single iOS chain sells for $2.5 million, and the math gets interesting.