I think 9 months enough to find good bounty members. However, to me there are some good bounty managers with less scam bounties. Some are bounty management teams. They are kripital group, goblin team, amazix.