Bugcrowd run bug bounty programs like https://bugcrowd.com/netgear https://bugcrowd.com/netgear on behalf of companies They explained earlier that if they ente

Bugcrowd run bug bounty programs like https://bugcrowd.com/netgear https://bugcrowd.com/netgear on behalf of companies They explained earlier that if they entered the bug bounty program with Netgear, they would be agreeing to not disclose: "By submitting the security bug, you affirm that you have not disclosed and agree that you will not disclose the security bug to anyone other than NETGEAR." So it seems they were trying to get Bugcrowd as a intermediary to contact Netgear on their behalf to "establish a communications channel outside of the Netgear bug bounty programs"