Hi Decode. I completely agree it is essential to provide incentives to detection bot developers to push the frontier of the network’s threat detection capabilities. If we look at what there is at the moment, there are contests (like this one live at the moment), and also matching funding at Gitcoin Grants Round 15 (link here).
Regarding your point of devs of protocols (or anyone deploying smart contracts) deciding to write their own detection bots instead of scripts, I think there are plenty of reasons why someone would use Forta instead of their own scripts. However, for Forta to succeed and protect the whole ecosystem, it is not enough with just them and there need to be incentives for any developer or security researcher to spend time on writing detection bots that can detect the next hack.
An interesting case would be if there are fees for subscribing to alerts, as discussed here in the forum, a portion of them could be assigned to the detection bot developer.
Thoughts?