You should make this service free for individuals (hackers) and charge companies.<p>Companies which pay for the service will be notified of the vulnerability before hackers.<p>Basically you foster a community of hackers while at the same time charging companies protection money from your own hackers.