We will acknowledge receipt of your report within
[specify time frame].
We will investigate and validate the reported vulnerability.
We will work to address the vulnerability within a reasonable
timeframe.
We may offer recognition and thanks for your responsible disclosure,
subject to your approval.