Today, ZCG made it official in the right path: ZCG Security & Vulnerability Disclosure Initiative
NOTE: This website (bountyzcash.org) will not count for any bugs, email, or activity, it will link to the official ZCG program above and will stay online until the domain expires.
Thank you!