How My Audit Methodology Changed When the Stakes Became Real

The difference between finding vulnerabilities in bug bounty programs and finding them in a product someone’s business depends on