points
It seems more likely to me that you could spend $20 to find a vulnerability in a piece of software that costed you $20k in human labor.