vulnerability disclosure policy

Also written: responsible disclosure policy, safe harbor

A policy that tells outsiders how to report flaws and may promise good-faith reporters safe harbor from legal action. It does not pay rewards.

Where the book teaches it