Bug bounty programs, once only run by the tech industry, have tripled since April 2016, according to Bugcrowds 2017 State of Bug Bounty report. The highest reported payout for a vulnerability was $50,000, while the lowest was $100,000. 44 percent of bug bounty programs are run by companies with at least 500 employees, out of which only 16 percent have more than 5,000 staff members. IoT vulnerabilities receive the highest payouts, especially in the automotive industry which registered 400 percent growth.”]