The article went over and highlighted the use of the policies known as bug bounties. Bug bounties are where a company hires an ethical hacker to try and penetrate their system to discover any lingering vulnerabilities. There are public and private bug bounties. A public bug bounty means anybody can take a crack at trying to figure out the company’s vulnerabilities while private ones require an invite. These projects can save a company from devastating losses and an insight into what they are doing right or wrong. There is risk involved in companies doing this because you cannot always trust the ethical hacker to do the right thing with the information they find. But the majority of evidence presented in the article showed major success for companies who used this method in finding and mitigating threats.