> I found many vulnerabilities in one of their recent acquisitions and although I was paid, they indicated that they won't fix any of them. That’s interesting

> I found many vulnerabilities in one of their recent acquisitions and although I was paid, they indicated that they won't fix any of them. That’s interesting to hear they don’t plan to fix them. I wonder if the bug bounty exists as some sort of insurance discount for having a program at all, even if they fix nothing?