Who is paying for security research.

Every organisation running a program on datacoconut, what they have paid out, and what they publish about how they handle findings. Running one yourself? Start here.