How to be sweet to your security researchers
blog.bugcrowd.com