Well at least you got that part correct. Do you just not know about security researchers? Or even bug bounty programs?
Why are you even on this forum? Doesn't seem like you know much about technology