I agree to be honest. At my day job, I also handle our security enquiries, and we're very dilligent in following them all up, but most are quite low quality, a

I agree to be honest. At my day job, I also handle our security enquiries, and we're very dilligent in following them all up, but most are quite low quality, and fairly spammy as you said. What we've done to try and cut it down, is we link to a hacker one bug bounty that excludes a lot of the low quality stuff as out of scope, and that seems to cut down on the low quality ones.