What conditions are required to qualify for a bounty reward?

The reported bug must be recognized by the company as a valid unique bug within the program scope, which can be reproduced and verified by the company.