[daeken]

> As part of Heroku and our parent company Salesforce.com’s commitment to philanthropy, if you are interested in donating your bounty to a recognized charity we will match it dollar-for-dollar.

Kudos to the Heroku folks for this. I haven't seen any other bug bounty program doing this (I'd love to be wrong -- please let me know if I am!), and it's a very nice change from the norm.

[jon-wood]

Google also match anyone who donates their bounty to charity.

[badhairday]

Yes! Reading that part put a smile on my face.