bug bounty

Formal programs that pay independent researchers to find and responsibly disclose software vulnerabilities. Bug-bounty work is Cade's primary legitimate income; he documents thirty-one CVEs across fourteen months.