We have worked with various clients in the past with per-bug vulnerability and if that vulnerability is  impactful and acceptable from your side then we take rewards according to our rates. If you also accept  the criteria of that vulnerability or we can also negotiate on this like for example if I reported any high impact vulnerability and you thought that it’s a medium-criteria vulnerability, then we can talk about it  and make any way according to the market. 

Secondly, in three-month contract-based work, we manually scan every domain and every parameter  repetitively that site contains, and it requires too much effort if you’re not okay with it then I can make it  a one-month contract with the offer of 2500 USD but in that contract, I can’t guarantee that I can check  a whole site like every parameter manually but I will try my best. Working with us I can guarantee you  that we can’t compromise on quality, and we manually scan every vulnerability and make your site the  most secure as we’re mastered in doing this work.