Create a standard bug bounty policy and post it. I presume you’d like to find high value bugs an that bounties may be an inexpensive way to find some. Plus it g

Create a standard bug bounty policy and post it. I presume you’d like to find high value bugs an that bounties may be an inexpensive way to find some. Plus it give big submitters a clear picture of what they can expect from you. Most that I’ve seen have some evaluation period before payment. If the big submitter doesn’t agree to your terms, they are probably not for real. Unless you are a high profile company, they probably won’t spend effort arguing. Also your customers might like that you have a public big bounty program. That might give them more confidence in your security.