I am not to sure how to feel about the literature reviews findings. I think that it very much makes sense that the first ethical hacker to successfully find a bug should be compensated but I think their should be a minimum base payment. I believe that it could work as a commission even though it would be somewhat difficult to calculate the percentages. If a bug is a large one though I think the commission should be higher but think that if someone is doing their job to help a company out they should be compensated in one way or another. Especially with the amount of future bugs that will be I think that a base pay shouldn’t be a lot but it might deter a lot of ethical hackers to not want to stay in their career if they cannot guarantee compensation.