Gurley says bug bounties are the only offensive security solution versus defensive dam-building approaches.
“It is the only offensive solution. Most of the security solutions are defensive where you're just building a bigger and bigger dam and trying to hold people out.”