What reward scheme do software and web services vendors offer to researchers who report vulnerabilities?

What reward scheme do software and web services vendors offer to researchers who report vulnerabilities?

• A. Bug bounty
• B. Responsible disclosure
• C. Security grant
• D. White hat reward

Answer: (A)

Bug bounty programs are the way software and web services vendors financially reward researchers who discover and responsibly report vulnerabilities in their products. They outline what kinds of findings are eligible, how to submit reports, and how payouts vary with the severity and impact of the flaw. Responsible disclosure describes the ethical process for reporting vulnerabilities, not a payment scheme, so it isn’t the term for the reward itself. The other phrases aren’t standard names for these programs, whereas bug bounty is the established mechanism researchers and vendors use.

Bug bounty programs are the way software and web services vendors financially reward researchers who discover and responsibly report vulnerabilities in their products. They outline what kinds of findings are eligible, how to submit reports, and how payouts vary with the severity and impact of the flaw. Responsible disclosure describes the ethical process for reporting vulnerabilities, not a payment scheme, so it isn’t the term for the reward itself. The other phrases aren’t standard names for these programs, whereas bug bounty is the established mechanism researchers and vendors use.