When we publish a component, we earn points on our profile, when we answer a question on the forum, we earn points on our profile, when we watch training, we earn points on our profile. But, when we send a security report through the OutSystems page, we do not earn points on our profile. Just like answering a question on the forum, or publishing a component, people who analyze and send security reports to OutSystems are also contributing to a safer product. Analyzing, detailing, writing and sending a security report to OutSystems, in my opinion, should be scored, as the professional has an account in the community and is helping to keep the product or website safer .