Run an effective bug bounty program — scope design, triage, researcher relations, and remediation workflows.