The "0x0A List"

The table below lists our best bug reporters since we launched Google's vulnerability reward program back in November 2010. The complete list of all security reporters is available here.

Congratulations to the current group!

What factors influence the ranking?

• Volume: The more valid bug reports you've sent in, the more points you get. Points are deducted for spurious reports.
• Severity: For those bugs, how severe are they? Better bugs earn more points.
• Recency: The most recent bug reports receive maximum value. Bug reports older than 6 months lose an increasing proportion of their value over time, capped at 50%.
• Charity: If you give, you receive a bump to your score.