What's interesting is there are roles out there where you are not permitted to participate in bug bounty programs. I've worked a few positions where the company

What's interesting is there are roles out there where you are not permitted to participate in bug bounty programs. I've worked a few positions where the company outright refused to allow compensation and I wouldn't have been authorized to sign an NDA on behalf of my company just to report issues to a third party. It created a lot of friction but I kind of understand the policy.