Bug bounty programs (BBPs) crowdsource vulnerability discovery—enabling ethical hackers to identify and report flaws for timely vendor fixes. However, vendors can also withhold information about these ...