Raising industry standards
to make the Internet
safer for everyone.

Cross-Account Protection extends the security protections that we have in your Google Account to the apps and sites that you sign in to with Google Sign-In. When apps and sites have implemented Cross-Account Protection, we’re able to send information about security events – an account hijacking, for instance – to them so that they can protect you too. To develop this leading technology, we worked with other major technology companies and the standards community to make it easy for all apps to implement.

At Google, we pioneered vulnerability reward programmes that pay independent researchers to find vulnerabilities in our services. To reward all the cutting-edge external contributions that help us keep our users safe, we award millions of pounds in research grants and bug bounties every year. We currently offer vulnerability rewards for many of our products, including Chrome and Android.

In addition to engaging independent researchers, we also have an internal team of engineers, called Project Zero, that tracks down and addresses security flaws in software used across the Internet.

We’ve always been at the forefront of co-creating or adopting the strongest possible sign-in and authentication standards on the web. We collaborate across the industry and share technology by developing centralised web standards. One such partnership with the nonprofit organisation FIDO Alliance worked to set and deploy new industry standards for users, companies and their employees to use, ensuring secure account access for everyone.

We share our security technology whenever we believe it can provide value for others. For example, we make our Google Cloud Web Security Scanner available free of charge to developers so that they can scan and analyse their web applications for security vulnerabilities. We’ve contributed multiple security tools, developed internally, as open-source projects for others to use.

We provide educational materials, training and tools to help people around the world learn how to stay safe online. Our outreach team annually reaches more than 100 million people – including educators, students, parents, the elderly and people with disabilities – with online safety resources and training.

Project Shield is a service that uses our security technology to help protect news, human rights organisations, election sites, political organisations and campaigns and candidates from distributed denial-of-service (DDoS) attacks. These attacks are attempts to take websites down and prevent users from accessing vital information by overwhelming them with fake traffic. No matter the size of the website or the size of the attack, Project Shield is always free of charge.

We launched an open-source data portability platform and continue to collaborate with companies like Apple, Microsoft, Facebook and Twitter to help people move their data across the web and easily try new online service providers.

We are committed to creating collaborative spaces like Privacy Sandbox and working with the web community to develop a set of open standards that protect user privacy while still supporting free, accessible content across the web. By sharing our resources and platforms, we hope to encourage progress toward a more private web.