HackerOne manages bug bounty campaigns / community vulnerability research for orgs and companies. This campaign is sponsored by FaceBook and Microsoft, according to this page: https://hackerone.com/internet-bug-bounty .

Software companies of late pay developers to find bugs in their security. Read more here: http://blog.codinghorror.com