Uma publicação com a etiqueta "Bug Bounty"

Short answer: bug bounty pays per valid finding and most participants earn nothing, because the easy issues in mature programs are already reported. Penetration testing pays a salary regardless of what you find. Bounties are a superb portfolio and a poor first income — do them alongside a job, not instead of one.