If you want to test a company look at their 'Responsible disclosure'. For example: https://www.facebook.com/whitehat