What should we understand? It looks like the H1 account is the actual company, at least they link to their website. Is the company doing bug bounty? Or is this

What should we understand? It looks like the H1 account is the actual company, at least they link to their website. Is the company doing bug bounty? Or is this a creative way to pay for an audit?