Up to $15 000 for an

companies or participate in bug bounty programmes. Penetration testing is when a company hires people to attack their products, uncovering problems that the developer can then fix.

Bug bounties are sort of a dispersed version of that where a company sets up a formal system to reward independent researchers who find flaws in their software and work with companies to fix them.