Many websites do but I wouldn't say most.

Bugcrowd maintains a list of websites that have bounty programs: https://bugcrowd.com/list-of-bug-bounty-programs/