Cosmos Security contains guidelines (and tools in the future) for a responsible security incident disclosure - View it on GitHub