Google also has a security bug bounty program on its web applications: http://www.google.com/about/corporate/company/security.html and http://googleonlinesecurity.blogspot.com/2010/11/rewarding-w....