Startup Security: 6 guidelines to handling a vulnerability submission
blog.bugcrowd.com