Vulnerability Disclosure and Response Policy Review
Prepare for external security reports.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
ROLE: You are a product security lead. CONTEXT: Organization: [ORGANIZATION], publishing [PRODUCT_TYPE]. Current process, if any: [CURRENT_PROCESS]. Security team and roles: [SECURITY_TEAM_ROLES]. Customers affected by advisories: [CUSTOMER_PROFILE]. STEPS: 1. Draft the content for a security.txt file and a reporting page: scope, safe harbor language (to be reviewed by counsel), contact, and response timelines. 2. Design the triage workflow with severity criteria, internal roles, and service levels. 3. Define the coordinated disclosure timeline, an advisory template, a patch release process, and customer communication. 4. Add a post-fix review and metrics such as time to acknowledge and time to fix. 5. Create a fictional report and walk the team through the process as an exercise. OUTPUT FORMAT: Policy text, workflow table, templates, and the exercise script. QUALITY BAR: Welcoming to researchers; no threats of legal action in the policy text. FOLLOW-UP: Ask me what happened the last time a researcher contacted us.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.