I share some of this frustration. I once spent a ton of time finding XSS vulnerabilities for a Delta Airlines bug bounty program. One by one I would find and su

I share some of this frustration. I once spent a ton of time finding XSS vulnerabilities for a Delta Airlines bug bounty program. One by one I would find and submit a report with instructions and screenshots. Every time they would reply saying they were already aware of the bug so no bounty. While I don’t doubt they were telling the truth it took away my motivation to invest time in this type of exercise going further.