Seems plausible. My issue with companies that do bug bounties often is that they appear to use it as a replacement (not an addition) for doing any internal secu

Seems plausible. My issue with companies that do bug bounties often is that they appear to use it as a replacement (not an addition) for doing any internal security or penetrating testing. Which at times is obvious by the low hanging fruit that is sometimes found.