---
id: 3119
title: "Don’t Believe These 4 Bug Bounty Myths"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/dont-believe-these-4-bug-bounty-myths"
published_at: "2019-08-22T17:00:00Z"
tags: ["bug-bounty", "myths", "pentest", "hackerone", "private-programs", "disclosure"]
phying_url: "https://phying.com/item/3119"
lang: en
---

# Don’t Believe These 4 Bug Bounty Myths

## Summary

HackerOne's Laurie Mercer debunks four bug bounty myths: most programs are private, time-boxed Challenges can replace traditional pentests, and public disclosure remains entirely optional.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2019-08-22T17:00:00Z
- **Original:** https://www.hackerone.com/blog/dont-believe-these-4-bug-bounty-myths
- **Phying News:** https://phying.com/item/3119