Are you FB or Twitter or on a similar scale? Also, bug bounties are not representative of real attacks. I've written my own share of complicated exploits, but

Are you FB or Twitter or on a similar scale? Also, bug bounties are not representative of real attacks. I've written my own share of complicated exploits, but from an actual defense perspective... that's not how people are getting hacked IRL. It's all word macros and sqlmap.