New Relic offers security researchers cred – not cash – for bug reports

The bounty is the exposure. You oughta be grateful!

Analytics firm New Relic has coupled up with vuln disclosure firm HackerOne as part of a "responsible disclosure program" for bugs. But while it pledges not to take legal action against anyone spotting a hole, it won't be ponying up cash for them either."