https://blog.bugbusterslabs.com/bug-bounty-vs-penetration-testing/