---
id: 5441
title: "Our Approach to Coordinated Vulnerability Disclosure"
source_domain: depthfirst.com
source_url: "https://depthfirst.com/research/our-approach-to-coordinated-vulnerability-disclosure"
published_at: "2025-12-05T00:00:00Z"
tags: ["supply-chain", "vulnerability-research", "vulnerability-disclosure", "responsible-disclosure", "coordinated-disclosure", "security-policy", "open-source-security"]
phying_url: "https://phying.com/item/5441"
lang: en
---

# Our Approach to Coordinated Vulnerability Disclosure

## Summary

depthfirst's coordinated disclosure policy: every report is human-verified and includes a PoC and fix guidance; vendors get 30 days to patch, then a 7-day adoption window before publication.

## Intelligence Metadata

- **Sources:** depthfirst.com
- **Published:** 2025-12-05T00:00:00Z
- **Original:** https://depthfirst.com/research/our-approach-to-coordinated-vulnerability-disclosure
- **Phying News:** https://phying.com/item/5441