Ask HN: Has anyone here made money from security Bug Bounty programs?

What was the experience like?

I'm willing to give it a try but I'm concerned about whether or not the companies will pay out in a timely manner.

The second concern I have is whether or not they will pay the advertised value or if they will claim is it a lower end bug and pay the minimum that they offer.

Seems to me that the amounts of money offered are pretty small actually for the value that the company gets from found bugs.