← Back to glossary

🤝

Responsible Disclosure

Security

Incident Response Patch (Security Update) Bug Bounty Security Audit

Reporting a bug privately so it can be fixed.

Definition

Responsible disclosure means telling the company about a security bug privately first, giving them time to fix it before details are shared publicly.

In plain English Reporting a bug privately so it can be fixed.

Why this matters

Why it matters: It reduces the chance attackers will exploit the issue before a fix exists.

Example

Example: A researcher reports a vulnerability and waits until a patch is released.