– We will provide prompt acknowledgement of your report
– We will work closely with you to answer any questions
– We will notify you when the vulnerability has been resolved
– We will publicly acknowledge your responsible disclosure unless you prefer to remain anonymous