Skip to content
Our Approach to Coordinated Vulnerability Disclosure
depthfirst.com | blog | #supply-chain | #vulnerability-research | #vulnerability-disclosure | #responsible-disclosure | #coordinated-disclosure | #security-policy | #open-source-security
Summary
depthfirst's coordinated disclosure policy: every report is human-verified and includes a PoC and fix guidance; vendors get 30 days to patch, then a 7-day adoption window before publication.
- Published
- Collected