"Bug bounty" programs are becoming more popular with developers, especially larger firms that can afford the expenditure. A couple of game studios have also employed the approach, with Riot of League of Legends fame starting one up a few years ago. But how are such programs managed internally?