A bug bounty program is an established method of reporting security vulnerabilities to companies for several years running.