As-salāmu ʿalaykum Ustadh, There’s a program called “bug bounty” where companies allow people to find vulnerabilities in their systems. If a valid issue is reported, they may reward you; but the amount isn’t fixed, and sometimes they may give nothing. Is it permissible to take part in such program?

Ustadh AbdulAziz al-Haqqan
The answer of Sh Muhammad Hisham is that this is allowed as it is ju'alah.