We notify maintainers of reports 24 hours after a report has been submitted. The logic was that this allows researchers to adjust their reports before pinging the maintainers.
However, maintainers may want immediate access to reports, especially if the reports allude to zero-day vulnerabilities, to begin coordination and response immediately.
Description
We notify maintainers of reports 24 hours after a report has been submitted. The logic was that this allows researchers to adjust their reports before pinging the maintainers.
However, maintainers may want immediate access to reports, especially if the reports allude to zero-day vulnerabilities, to begin coordination and response immediately.