Hacker One's business model is creating a pen for all the whistleblowers (security researchers doing bug bounties) so they are trapped inside it and can't escape unless they want to lose their ability to get paid in the future.

It's a classic Monopsony.