for exclusive intellectual property rights to their reports. These schemes have
raised questions regarding the ethics and efficacy of such financial incentives.
Some critics are concerned that such efforts will lead to bidding wars with cyber
criminals. In fact, the fees offered per vulnerability were more than seven times