We will discuss the importance of a public responsible vulnerability program for businesses and the public sector and how to build healthy ethical communities and reduce massive public data leaks. We will see examples from GDI & CSF foundations and what technical and legal challenges there are before and how you report the vulnerabilities you found responsibly. We will also touch on the security.txt standard and how to embed that into your organization and projects.