The company I work for currently offers an external bug bounty program (And has done so for a few years now). We wanted to find a way to drive internal adoption of our own products (good ol' ...