Scale on-going professional security testing efforts with bug bounty

The new pace in which code is being pushed to production is causing security teams to reexamine how they integrate security verification into the software development lifecycle. One strategy for keeping pace with today's accelerated development lifecycle is to tap into the scale provided by private bug bounty. This crowdsourcing model defines a payout scale for vulnerabilities identified, typically based on criticality, and invites select security researchers to hunt for bugs until the bounty purse is exhausted. You only pay for security bugs that are identified and professionally validated, which is a major benefit in addition to the model's scalability.