In the article “Hacking for good: Leveraging HackerOne data to develop an economic model of Bug Bounties”, the findings that were provided were very interesting. One finding that mentioned is that “hacker supply is price inelastic”. It talks about how a lot of hackers are motivated by things that don’t contain money, such as getting fame and exposure. Another finding was “brand profile and revenue have an economically insignificant impact on reports companies receive”. That finding talks about that revenue is successful but are not successful economically. There are three other findings listed, but the last one that stuck out to me is “The number of new programs has a statistically insignificant effect on reports companies receive.” Here, it talks about hacker time has increased and how HackerOne was been recruiting people to hack and get them to spend more time hacking.
The literature review talks about how bug bounties are cost-effective and that security researchers are more motivated by things that don’t have any monetary value, and how revenue is successful byt not successful economically. Also that older companies are receiving fewer reports compared to newer companies which is a negative thing because their company can be more at risk.