@dzucconi => Lunching a Security Bug Bounty Program at Artsy.

This is a pass at a security bug bounty program blog post. I am sure I forgot things and maybe some things I shouldn't talk about :)

There're some links here to force-public that were made from force, what's the process for updating force-public? 
I'm assuming the two thirds of issues is referring to XSS-related stuff?