Advisories
Coordinated security advisories
Published after vendor coordination, with reproducible technical detail and remediation timelines where available.
Disclosure policy
I report findings privately to vendors with a 90-day disclosure window from initial contact. I extend the window for vendors who acknowledge receipt within 72 hours and demonstrate progress. PGP key in the footer.