I've been doing bug bounties for 7 years now, i don't earn much, only ~$25.000 a year, but i live in a 3rd country with a very devalued currency x dolar so i live confortably. I've been thinking about using my bug bounty knowledge on SEO for years but i'm too afraid of legal suits or identity...