I’ve seen some companies do bounties on their Github issue tracker, like <a href="https://github.com/qdrant/qdrant/issues?q=label%3A%22%F0%9F%92%8E+Bounty%22">https://github.com/qdrant/qdrant/issues?q=label%3A%22%F0%9F%...</a> but I’m not sure if there are any organized larger aggregate bug bounty sites for these types of bounties.