3 ms·
> exist to capture and prevent responsible disclosure, not encourage it. I will say that Google's VRP is the exception. They have top notch people who answer t
by NitpickLawyer 2y ago
> exist to capture and prevent responsible disclosure, not encourage it.
I will say that Google's VRP is the exception. They have top notch people who answer the initial report, will keep you in the loop (usually) and will consider impact if you'd gone further. BC or H1 are hit or miss, and more often miss.