https://hackersec.com/bug-bounty-vs-pentest-as-a-service-ptaas/