Chapter 2

1. Companies such as Bugcrowd and HackerOne will provide a standardized submission template form, discolure guidelines, and payment system for the participants of their programs, whereas individual company programs have to be evaluated and complied with on an individual basis.
2. Yes! In addition to giving you valuable experience, it can open the doors to private programs that offer better testing opportunities.
3. We use this term to refer to private bounty programs on platforms like Bugcrowd where invites are only extended to a pre-selected, screened number of researchers who meet certain criteria.
4. You can find more resources in the Other tools and Going further sections.
5. An older site with more opportunities for user inputs, using software that is not updated regularly, and maintained by a small organization will find it naturally harder to secure their attack surface than...