We ran a security bounty for our tiny bootstrap startup. Here's what happened | Not Hacker News!