Why so cheap? Because $500 is the base, not the maximum. $500 is the base reward for Google and Mozilla's web bounty programs as well. Another similar bounty pr

Why so cheap? Because $500 is the base, not the maximum. $500 is the base reward for Google and Mozilla's web bounty programs as well. Another similar bounty program, from CCBill, lists a maximum payout of $500 (although I can confirm that they can and will issue higher rewards under certain circumstances: https://twitter.com/#!/williamlbell/status/97379423816384512 https://twitter.com/#!/williamlbell/status/97379423816384512) [Note: I've participated in the bounty programs for Google, Mozilla, and CCBill. I've submitted security vulnerabilities to Facebook as well prior to this bounty program]