Netscape created the first bug bounty programs 20 years ago, now 100s of companies run bug bounty programs—with a major increase in the last 5 years. Bug bounties create symbiotic relationship allowing security researchers to be rewarded for identifying vulnerabilities without risking prosecution, and aiding companies in identifying security problems. What types of bugs are being found, how much is being paid out, and where is the business value? Based on 2015 data, the presenter will help the listener draw conclusions. Leif is a Senior Security Engineer at Bugcrowd, an innovator in crowdsourced security testing for the enterprise. Prior to joining Bugcrowd,