As someone who was recently pitched the role for running a bug bounty program I insisted on a resource commitment from all other stakeholders. Otherwise it’s ef

As someone who was recently pitched the role for running a bug bounty program I insisted on a resource commitment from all other stakeholders. Otherwise it’s effectively hush money. I got what I wanted, but I fear not everyone knows what to ask for.