Add Coordinated Disclosure terms.

federacy · May 22, 2020 · f57891a · f57891a
1 parent f3f8877
commit f57891a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -43,6 +43,10 @@ We may decide to award higher for clever or more impactful vulnerabilities, deci
 
 ## Disclosure
 
+**Coordinated Disclosure:** Researchers may only share vulnerability details with third parties after the vulnerability has been fixed and the Program has provided permission to disclose OR 90 days after submission, whichever comes first.
+
+or
+
 **Discretionary Disclosure:** Researchers may only share vulnerability details with third parties after requesting and receiving explicit permission from the Program.
 
 ## Guidelines