Eh, what...?
"A bounty price can't really exceed what an in-house security person will make."
Ehhh.. what?!? Whyever not? Surely freelancers need to get more money than employees in order to rebalance the risk/reward ratio to compensate for the lack of guaranteed income?