Ask HN: Best way to report a bug (and get a bounty)

So, it happens that you find a bug in a software.

However the company running/managing the software offers no bug bounty program or similar.

What is the best way to report the bug to the company without getting /dev/nulled by the office management or some first level support?

If you put a bit work in the hunting and want some compensation, what would be the best way to communicate that?