[bashwizard]

Most of us get private invites by the companies themselves or there are already open public bug bounty programs on HackerOne, Bugcrowd, Intigriti etc for anyone to try to hack them within confined scopes.

There are a lot of money to be made if you're good, so there's the incentive as well.

[somewhat_drunk]

How much money can a good hacker make per year doing this sort of testing?