Microsoft offers big rewards for vulnerability detection/fix
This is described as one of the most generous such programs in the software industry, and it's open to talented hackers in most countries (excluding a handful that are under U.S. sanctions) , even those who are underage (14 years old and up, with parental permission). Interested? Read more here: