This session will discuss bug bounty programs and alternative resolutions, as the topic of these programs is running rampant online. Being the expert cybersecurity witness for the USA in USA V. Sullivan, exposed many faults in these programs. What makes a legally compliant bounty program? Are alternatives such as tabletops more useful and less costly? How do you adequately screen a vendor?