Is the Bug Bounty program true?

I believe what you're read is true, but at least for now, it is invitation only.

-=-

The program launches in September with five categories of risk and reward:

• Vulnerabilities in secure boot firmware components: Up to $200,000
• Vulnerabilities that allow extraction of confidential material from Secure Enclave: Up to $100,000
• Executions of arbitrary or malicious code with kernel privileges: Up to $50,000
• Access to iCloud account data on Apple servers: Up to $50,000
• Access from a sandboxed process to user data outside the sandbox: Up to $25,000

-=-

Example:

h t t p : / / venturebeat.com/2016/08/04/apple-announces-a-bug-bounty-program