“I think it could vary a lot because I suppose there's no reason why a startup or any other company couldn't offer some rudimentary bug bounty type, program or something, but in general, I would agree, if you haven't done the fundamental, especially if you have a, if you're an older company”

Transcript evidence from Dr. Jared Demott -- Cloud Security & Bug Bounty.