Security

Bug Bounty

Also written as Responsible Disclosure, Vulnerability Disclosure Program

Paying external security researchers for responsibly reporting vulnerabilities they find in your systems.

Think of it like

Offering a reward to anyone who finds a hole in your fence and tells you rather than climbing through it.

Junior or senior?

Running one is a maturity signal — it means the organisation can receive bad news from strangers and act on it.

Senior sounds like

Talks about triage load and response times.

Ask them

“What did the intake process look like, and how quickly did real reports get fixed?”