Sure, but what blackhats often claim is that even if a company pays whitehats large sums of money, it is often fairly easy for the blackhats to do just as much damage as they could before.