Bug Bounty is a type of crowdsourced security testing program. It encourages security researchers ("white hat hackers") to find and report security vulnerabilities in an organization's software or web applications in exchange for monetary rewards, recognition, or both. It is an effective way for organizations to identify and fix security flaws before malicious actors exploit them.