Running a security bounty program as a bootstrapped business | Hacker News Reader