Jepson is awesome. Bug bounties are not such a hot idea in general. There is the issue of entitlement on the white hat, disputes about severity levels, potenti

Jepson is awesome. Bug bounties are not such a hot idea in general. There is the issue of entitlement on the white hat, disputes about severity levels, potential for blackmail, and the two engineers that are clearing the false positives. Better to put them in the pen test team.