What is Bug Bounty?

A bug bounty programme is a crowdsourced security initiative where organisations offer financial rewards to independent security researchers who discover and responsibly disclose vulnerabilities in their systems. Bug bounties complement formal penetration testing by providing continuous, ongoing security assessment from a diverse pool of researchers. Major platforms such as HackerOne and Bugcrowd facilitate these programmes for organisations of all sizes.