These are usually great arrangements for companies to reward hackers disclosing vulnerabilities they find in their code.
São geralmente ótimos  acordos para as empresas remunerar um "hacker" por divulgar essas falhas