[NameNickHN]

I wouldn't worry too much about it. In my opinion a bug bounty program is another marketing tool of big companies. They have to portray an image of a company that cares about security.

From my experience if you are a small company and fix a reported bug in a timely manner, nothing bad will happen. As long as your customers see that you're reacting quickly, everything is going to be fine.