@dzucconi => Lunching a Security Bug Bounty Program at Artsy.

This is a pass at a security bug bounty program blog post. I am sure I forgot things and maybe some things I shouldn't talk about :)

There're some links here to force-public that were made from force, what's the process for updating force-public? 
What exactly are "do not send money there" lists referring to? Are there actual lists that can be pointed out?