Glossary: Compliance, Privacy and Penetration Testing

Bug bounty program

Also written: bug bounty

A program that invites outside researchers to find flaws and pays them for valid reports. Unlike a pen test, it runs all the time under published rules instead of in one agreed window.