Apple’s bug bounty went on for sometime, but the program was open only by invitation for selected security researchers. The program closed for a while and now it is open to all security researchers.
The bug bounty which was initially an invitation-based program launched in 2016, rewards between $100,000 to $1 million.
The bounty categories as defined by Apple include bugs in the iCloud, device attacks via physical access, network attacks with user interaction among others.
Apple is willing to pay those who find and report discovered bugs to Apple Product Security, depending on the flaw discovered.