When to properly reward a bug bounty submission
blog.bugcrowd.com