> "I noticed a potential security issue with your site. What is the best way to report it?" It should come with more back-story because companies (security@ em

> "I noticed a potential security issue with your site. What is the best way to report it?" It should come with more back-story because companies (security@ email address) receive quite a few of similar emails and many are borderline spam. I'm talking about security researchers telling us they found something, then when we reply asking for details there's silence. To the point where we sometimes not even answer any more. It's a sad state of security research where some are spamming 100s of companies.