I was targeting YC company, I just filtered my success with YC companies.
With bug bounties there are many cases of duplicate issues or they are aware of issue internally. That count as failure for me but not to the companies.
do not remember the ratio, but sometime it was easy some it wasn't. As I test only website, most companies do test their sites themself. So you can consider 70-30 ratio for success-failure
With bug bounties there are many cases of duplicate issues or they are aware of issue internally. That count as failure for me but not to the companies.