Comprehensive vulnerability disclosure guidelines covering philosophy, safe harbor, submission process, disclosure timelines, private programs, public recognition, bounty eligibility, prohibited activities, and researcher conduct.

Version history

• v2026.05 (2026-05-18) — Comprehensive overhaul aligned with industry best practices for coordinated vulnerability disclosure, safe-harbor protections, and researcher-program engagement.
• v2026.04 (2026-04-18) — Introduced tracked version metadata for disclosure-policy consent records.
• v2024.07 (2024-07-26) — Initial disclosure guidance published on the platform.