There are several companies offering "bug bounties" -- payments to people to find security bugs and report them responsibly.
I will update this page with links to the various bug bounty programs as I become aware of them. If you know of a program that is not linked here (or if ...