4 ms·
> One problem with this is that the corporate users who would fund a bounty competitive with the grey market don't really care about the grey market. Mind elab
by Thriptic 8y ago
> One problem with this is that the corporate users who would fund a bounty competitive with the grey market don't really care about the grey market.
Mind elaborating?
> Your demo page shows a funding goal of $50,000... for BountyGraph. Not 1 HackerOne program in 10 is funded even to the tune of $20k, and those people all run actual businesses.
Sure, but in this case you're not relying on one business to fund the whole bounty; theoretically many businesses would be pooling funds. If hundreds of companies pledge small amounts, you are looking at real money being made available.
- tptacek 8y agoI feel like I did elaborate on the grey market point but if you have more specific questions I'm happy to take a whack at them. A big reason businesses don't put huge amounts of money into H1 bounties is that the median H1 bounty payout is probably somewhere in the vicinity of $100.