Responsible Disclosure
A centered header over three response time tiles, side by side in scope and out of scope lists, and a report button with a safe harbor note.
A centered header over three response time tiles, side by side in scope and out of scope lists, and a report button with a safe harbor note.
Search blocks by description or jump to a page.
The source for every Marketing block is included with Basic and Pro. Pick a plan to copy the code.
Already purchased? Log in
Responsible Disclosure is the section that tells a security researcher exactly how you handle a report. A centered header sets a welcoming tone, then three tiles state the response times you commit to: acknowledgement in 24 hours, a triage verdict in 3 days, and a fix or status update inside 90 days. Below them, paired in scope and out of scope lists draw the boundary of the program with checks and crosses, and a report button closes the section with a safe harbor note underneath.
The commitments and both scope lists live in typed arrays, so tuning the timelines or adjusting what counts as in bounds is a copy change rather than a layout one. Icons and theme tokens carry all of the styling, which keeps the tiles and lists consistent in light and dark mode without any image assets.
Reach for this block when you run, or are ready to run, a vulnerability disclosure program and want researchers to trust the process before they email you. It fits on a dedicated security page or a trust center, where a researcher who just found something checks whether reporting it is worth their time. Clear response times and an honest scope boundary do more to earn a report than any bounty figure, and the safe harbor line removes the last hesitation.
A natural flow around it on a Marketing Pro page:
Before
After
The obvious fit is a coordinated disclosure policy with its response commitments and scope. A few other ways to use the frame:
Tip: only publish response times you can actually meet. A researcher who waits past a stated window will say so publicly, and a missed commitment costs more trust than a longer honest one.