
ITRP
External Program
Submit bugs directly to this organization
Notifying a vendor before publicly releasing information about a security issue is a best practice known as responsible disclosure. Responsible disclosure allows companies like the ITRP Institute to better protect its customers by fixing vulnerabilities before they are brought to the attention of someone who may want to exploit them. We strongly encourage anyone who is interested in researching and reporting security issues to observe the simple courtesies of responsible disclosure. The ITRP Institute follows the same practice when it discovers and reports security vulnerabilities to other organizations.