The competition for discovering and reporting zero day exploits is increasing, with governments and private companies now offering millions to those who report exploits to them. However, this raises the question of how companies can compete with these lucrative financial incentives for bug hunters while still retaining their own engineers' loyalty.