Many companies, including Apple, Uber, and Yelp, regularly offer bounties to hackers. The rise of hacking bounties is due to how the community has become more organized and helpful. The expense is obviously worth it or the bounty programs — and sites like HackerOne — wouldnt exist. The main advantage is that you get researchers that think like a hacker, says Alvaro Hoyos, the CSO at OneLogin, an identity and access management company. One big challenge is finding the right bounty amount to match the vulnerability.”]

