I have a personal, but less extreme, example of why it can be beneficial to keep an eye open. A service my company started using had an easy-to-find gap in aut

I have a personal, but less extreme, example of why it can be beneficial to keep an eye open. A service my company started using had an easy-to-find gap in authentication, where they were only checking to see if you were logged in, but they were not preventing accounts from accessing data in other accounts. I pulled some data, made a screenshot, and told my CEO. He then started a call with the CEO of the new service, and I provided the screenshots, and the details of the vulnerability. We ended up getting 90% off service fees for 6 months, which saved us a ton of money. In cases like these, everybody wins.