Security, are there bug bounties?

It should have its own bug bounties program.