“Bug Bounty implies an obligation of result (you pay only for what you get), while penetration testing only implies an obligation of means.”
“I found a vulnerability on BlaBlaCar, I can be rewarded for this work legally and without taking any risks."








