I am the founder and CEO of Luta Security, which creates and manages sustainable bug bounty and vulnerability disclosure programs (VDP). I led the launch of the first bug bounty programs for the U.S. government (Hack the Pentagon) and Microsoft. I am the co-author of ISO 29147 (vulnerability disclosure) and ISO 30111 (vulnerability handling processes) and serve in two advisory roles for the U.S. government. Contact me if your organization wants to build (or improve) a VDP or bug bounty program.