@Farah Hawaa What I learnt from a year of triaging bug bounty reports