A guide for CTOs, CISOs, and security leads at Vietnamese enterprises and startups to understand the benefits and risks of the crowdsourced pentesting model. It walks through how to run a Bug Bounty program and - more importantly - how to leverage the security-research community as part of a strategy to defend the organization against internet-borne threats.