From the other side (bounty program manager -this was linked to in another article on the assetnote blog):
https://medium.com/@collingreene/bug-bounty-5-years-in-c95cd...