> I've seen security audit contracts starting with responsible disclosure of vulnerabilities. But was that "We found a hole, here it is." "Thanks! Your good a

> I've seen security audit contracts starting with responsible disclosure of vulnerabilities. But was that "We found a hole, here it is." "Thanks! Your good at that" "I know, want to hire us?" or "We found a hole. Pay us and we'll tell you." Because those are very different approaches.