Cloudflare's bug bounty program used to be exclusively T-Shirts/swag but it looks like they now might give out service credits, it doesn't state the exact reward:
> Reporters under the age of 18 will not be eligible to receive Cloudflare service rewards