Bounty hunting has moved online to catch hackers before they act, and finding flaws can be profitable for programmers.