> Companies that lack security expertise but manage bounties tend to radically overpay bounties Could you share your reasoning on this? Are you saying they're

> Companies that lack security expertise but manage bounties tend to radically overpay bounties Could you share your reasoning on this? Are you saying they're overpaying for a low threat type of vulnerability, have a large number of vulns that should have been caught earlier, or something different? Genuinely curious! Thanks