Comment by CodesInChaos

I'm sure if somebody hired him for a pentest it'd cost more per vulnerability found.