Bug bounties and the Vulnerability Disclosure Program (VDP) are two of the fastest-growing ways for companies to engage with the security research community and uncover unknown security vulnerabilities. This talk will explore how the law interacts with bug bounties, VDP, anti-hacking laws, and more.