Responsible disclosure

To be clear, not all companies are like this.