If the vulnerability you wish to report is not really eligible with the Bug Bounty method, you could report it to our non-incentivized Responsible Disclosure program. So in order to visit Germany for five days, Belgium for 4 days, as well as the Netherlands for three times, you will be qualified