I don't know of any company that publicly advertises the bonuses they give (if any) to employees for finding vulnerabilities in their own software. That seems more like part of someone's job description.
It's possible that GP meant giving independent researchers access to internal tools. That would be interesting but also very difficult to pull off safely.