Find vunerability Get Paid

Yes!! its true..
checkout Zero Day Initiative, a new kind of partnership between 3com and TippingPoint to support research in security area.
Homepage says
"The Zero Day Initiative (ZDI), founded by 3Com and TippingPoint, a division of 3Com, represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities. The program's goal is threefold:
1. reward independent security research
2. promote and ensure the responsible disclosure of vulnerabilities
3. provide 3Com's TippingPoint division customers with the world's best security protection"

Process is properly defined in this image