To encourage people to report vulnerabilities, introduce something comparable to a Bug bounty program. 

Use gamification and fun prizes.