Bug bounties have become a staple of the cyber security toolkit, offering researchers a way to get paid to find and report ...