India tops the list for submissions of bug reports by country. Yet, Indian companies holding bug bounty programmes are few and far between.