Glossary: Policies, Standards and Risk Management

bug bounty program

Also written: bounty program, bug bounty

A program that invites outsiders to report security flaws and pays them a reward. Paying is what separates it from a plain vulnerability disclosure policy.