How one bug bounty researcher chooses the features they investigate | TickerVault