Find Bugs? Square Will Pay Up

When it comes to fighting cybersecurity threats, there are many possible philosophies, but one school of thought says that if you can’t beat ‘em, it’s time to consider paying them.

It is in that spirit Square has launched its very own bug bounty program—officially giving programmers a license to poke around inside its tech for security flaws—provided they play nicely with others and report anything they should happen to find.

“With so many sellers relying on Square to run and grow their business, we’ve made protecting them a priority,” Square noted on its blog. “We monitor every transaction from swipe to payment, innovate in fraud prevention, and adhere to industry-leading standards to manage our network and secure our web and client applications. We protect our sellers like our own business depends on it — because it does.”

Those that do find something will get the credit for the find (and the attendant honor due their name), along with a cash gift—which Square says will be a minimum of $250.

Square is launching its program in conjunction with HackerOne, a site launched jointly by Microsoft and Facebook to help secure the Internet stack by offering cash rewards to those capable of hacking into it.

Square notes that it is “particularly interested” in problems that will affect payment flow, though it is accepting data on all of its domains and properties.