Security research, coordinated-disclosure guidance, and updates from the Harbor team.
A survey of 750 U.S. nonprofits finds just 1.3% publish a way to report a security vulnerability, against 65.9% of federal agencies.