You don't (at least not legally). The money is given as an incentive from companies which takes security seriously. It is used to persuade you to disclose the

You don't (at least not legally). The money is given as an incentive from companies which takes security seriously. It is used to persuade you to disclose the vulnerability to them rather than selling it on black market as 0-day.