Finding qualifying people is hard, but with bug bounties you don't have to worry about it right? You only pay when you approve that PR.. I've seen algora being

Finding qualifying people is hard, but with bug bounties you don't have to worry about it right? You only pay when you approve that PR.. I've seen algora being used a lot by many popular projects and recently heard about polar.sh also supporting bug bounties.