The Snapsec Vulnerability Disclosure Programme provides a structured framework for security researchers to report vulnerabilities in systems, services, or products. It accepts submissions via email or a secure web form, allowing anonymous reporting. The program requires detailed reports including the vulnerability's location and potential impact. It ensures sensitive information is handled securely and promptly, with acknowledgments sent within five business days. The programme facilitates coordinated disclosure, sharing reports with agencies like CISA when necessary, and offers recognition for contributors while emphasizing defensive use of submitted information.
