Bug bounty programs are an example of what type of program?

Bug bounty programs are frequently part of responsible disclosure programs intended to provide a way for third parties to report security issues and to be incentivized to report them in responsible ways. Bug bounties can help identify flaws, but they’re not typically part of contracted penetration testing engagements. Third-party bounty is not a typical way of describing them, and trusted threat programs were made up for this question.