Google is no slouch when it comes to paying bug bounties.

In the last year, Google has paid more than $1.5 million to 200 different researchers for finding more than 500 bugs. It has paid out over $4 million since launching its bug bounty program in 2010.

Google is expanding the scope of its Vulnerability Reward Program to pay bounties when it deems valid, for its Android and iOS mobile applications.

The program will work as follows (official rules):

••Google will publish different types of vulnerabilities, products and services for which it wants to support research beyond its normal vulnerability rewards.

••Grants will be rewarded immediately before research begins, with no strings attached. Researchers then pursue the research they applied for, as usual.

••There will be various tiers of grants, with a maximum of $3,133.70 USD.

••On top of the grant, researchers are still eligible for regular rewards for the bugs they discover.

Keep in mind, however, that Google says this program is “experimental.” In other words, it could disappear one day without notice.