a bug bounty program is an incentivized initiative where organizations invite security researchers, often called ‘white-hat hackers,’ to discover and report vulnerabilities in their systems in exchange for monetary rewards.