We've all heard about Bug Bounty programs, and they are becoming far more accepted and a standard industry tool. But what happens when a bug is submitted? Get an insider's perspective from PayPal's Bug Bounty program, including triage and risk decisions, the internal process and debates, and the challenges of communication. We also discuss the ethical considerations of running a program, the future of Bug Bounties, and, of course, our favorite war stories.