Bugs, Bounties, and Beyond...
We reply immediately
https://www.owasp.org/index.php/Bug_Bounty_Projects