Direct link to Facebook's bug bounty program: http://www.facebook.com/whitehat/bounty/

Mozilla (http://www.mozilla.org/security/bug-bounty.html) and Chromium (http://dev.chromium.org/Home/chromium-security/vulnerability...) have bug bounties too and I'm sure many other projects do.