HackerOne’s co-founders are betting they can persuade the world’s hackers to spend their free time solving security’s problems, not causing them, and that businesses will pay them a bounty for their service.