3 ms·

Absolutely you are if you give them the bug before promise of payment. You're always best off disclosing publicly if they don't want to pay you.

• kramerger 3y ago
  But that's the whole point of a commercial bug bounty program
  • behringer 3y ago
    That's the "if you give them the bug before promise of payment." part of my comment.