Episode 159: Avoiding Downgrades on Google Cloud VRP with Cote and Darby Hopkins

Episode 159: In this episode of Critical Thinking - Bug Bounty Podcast we sit down with the Google Cloud VRP Team to deep-dive policy and reward changes, what the panel process looks like, and how to best configure for success.

Follow us on X

Got any ideas and suggestions? Feel free to send us any feedback here: [email protected]

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater, rez0 and gr3pme on X:

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

Get some hacker swag

Sponsored by ThreatLocker – Join Justin at Zero Trust World in March and get $200 off registration with Code ZTWCTBB26 https://ztw.com/

Google Cloud VRP Swag Bonus! Mention the podcast in any rewarded (cash or credit) VRP report submission before the end of April to receive bonus swag!

Today’s Guests: Darby Hopkins Michael Cote

====== This Week in Bug Bounty ====== AI Red Teaming Explained by AI Red Teamers

Good Faith AI Research Safe Harbor

Join the Adobe LHE at NULLCON GOA

====== Resources ======

‘Legendary Guy’ - Jakub Domeracki

Google Cloud VRP rewards rules

Google Cloud VRP product tiers

Bug Hunters blog on the 2025 Google Cloud VRP bugSWAT

Google VRP Discord

Google VRP on X

====== Timestamps ======

(00:00:00) Introduction (00:10:03) CloudVRP Bugswat Event Breakdown (00:16:40) VRP Policy & Rewards Changes (00:04:50) Panel Process (01:00:08) Configuring for Success & Avoiding Downgrades (01:33:47) Scenarios for Success