Glossary: Vulnerability, Asset and Change Management

Bug bounty

Also written: bug bounties

A program that publishes a scope and rules and pays outside researchers for each valid new finding, usually through platforms such as HackerOne or Bugcrowd.