Glossary: Vulnerability Management and Monitoring

Project Zero

Also written: 90+30

Google's security research team. Its "90+30" disclosure policy gives vendors 90 days to fix and publishes details 30 days after the fix ships, or allows only 7 days if the flaw is already exploited.