Motivations vary, and it's not for everyone - but we're quite happy with the participation we're getting out of it. FWIW, the average amount is sort of meaning

Motivations vary, and it's not for everyone - but we're quite happy with the participation we're getting out of it. FWIW, the average amount is sort of meaningless: we pay between $3k and $20k for high-impact bugs. There are also some researchers who prefer quantity over quality, and go after low-hanging fruit in acquisitions and isolated, non-sensitive services - often using custom automated tools. These findings usually pay around $100, skewing the total.