What’s the Responsible Solution?

This document is a concise guide to vulnerability disclosure: it defines disclosure, outlines full, private, and coordinated disclosure models, lists pros and cons, recommends best practices for researchers and vendors, explains the components of a Vulnerability Disclosure Program (VDP) (promise statement, scope, safe harbor, process, evaluation), and mentions HackerOne as a platform to run VDPs.