Could anyone recommend BugCrowd vs HackerOne (vs others?) from the view of a company wanting to a formal have pentesting and ongoing bounty program? I've read

Could anyone recommend BugCrowd vs HackerOne (vs others?) from the view of a company wanting to a formal have pentesting and ongoing bounty program? I've read the pricing models are different between the two and pentesters seem to work with both.