Glossary: Vulnerability Management and Monitoring

bug bounty program

Also written: bounty program, bug bounty, private bounty, public bounty

A program that pays outside finders a reward for each valid, new vulnerability they report, following a published scope, rules and reward table. It can be private (invited researchers) or public, and it needs a mature fix process behind it.