Would people reward you if you informed them of their vulnerabilities & exposure on the internet?

most companies would report you to the authorities but it is possible to get a job for a single company looking for vulnerabilities - if you want to be a good Samaritan you need to be anonymous and consequently can't usually get paid