Bug bounty programs encourage security professionals to find vulnerabilities in an application in exchange for a reward. Bug bounties use the real-world knowledge of security professionals to find vulnerabilities that internal security teams may miss. Main benefit of such program is that the company pays for results only when a vulnerability is verified.