We're working on this..
Note: we do not offer monetary rewards for vulnerability disclosures
...
"Safe Harbor": (In development) Assures that reporters of good faith will not be unduly penalized.
Process: (borrowed from https://www.cpacanada.ca/en/vulnerability-disclosure-policy while we develop our own policy)
...