Agreed with others that it's worth considering a small private program. You can do time boxed bounties with a capped cost, that way you're getting results witho

Agreed with others that it's worth considering a small private program. You can do time boxed bounties with a capped cost, that way you're getting results without committing to a huge budget. Check out Bugcrowd's "on demand" bounty: https://bugcrowd.com/solutions https://bugcrowd.com/solutions