Yes, $500 is pretty common for these security bug bounty programs: https://bugcrowd.com/list-of-bug-bounty-programs/