A bug bounty program is a deal offered by a website, organization, or software developer where people receive money or recognition for reporting security vulnerabilities.
How bug bounties work: Companies get help from thousands of security experts worldwide (crowdsourced testing), find and fix vulnerabilities before hackers can exploit them, companies only pay when a real, valid vulnerability is found by a security expert.