So: why would they be offering six figures for individual flaws again? And it seems you missed the part where I said that I'm naturally not expecting them to p

So: why would they be offering six figures for individual flaws again? And it seems you missed the part where I said that I'm naturally not expecting them to pay out six figures for just any minor flaw. The idea is to convince anyone who finds an actionable flaw that it's more worthwhile to sell that to google, rather than thinking of more creative ways to turn it into money. I believe this kind of crowd-sourcing would be more effective than any security team could possibly get. I'd venture the guess that the large majority of people who are pen-testing google properties every day is not employed at some security firm.