Recent blog post, NordVPN has announced the lunch of bug bounty program. The program is lunching with the other security changes. One is noteworthy step by partnering with the US-based Cyber-security firm VerSprite.
They also planned a full scale third party security audit for the upcoming year.