@dzucconi => Lunching a Security Bug Bounty Program at Artsy.

This is a pass at a security bug bounty program blog post. I am sure I forgot things and maybe some things I shouldn't talk about :)

There're some links here to force-public that were made from force, what's the process for updating force-public? 
I'll change this to "most". It's more than XSS, the whole list here applies.