Very frequently I notice bugs and vulnerabilities to different websites / products / saas.Some of them are minor, and some are definitely very severe. From famous startups to really big companies.What would / can you guys do ethically & legally?
I did find some horror stories in the past about people reporting vulnerabilitiesIs there a way to ethically make a decent living from this? IE: consulting, employed, self-employed, etc?It seems most of it is not crystal clear and certain as other career tracks. 
IE: if i wanted to switch careers to be a PM or sales, etc and i wanted to be an insta millionaire, there's a well documented path for that