Responsible disclosure

HackerOne offers a Vulnerability Disclosure Program (VDP) for responsible vulnerability disclosure, provides a Bug Bounty program to incentivize the discovery of vulnerabilities, and hosts live hacking events and webinars for community engagement. These elements indicate that HackerOne has a responsible disclosure policy, provides a clear process for reporting security vulnerabilities, commits to not taking legal action against individuals who follow their responsible disclosure policy, and acknowledges and rewards individuals who report security vulnerabilities responsibly.

Greenwork has a responsible disclosure policy, provides a clear process for reporting security vulnerabilities, commits to not taking legal action against individuals who follow their responsible disclosure policy, and acknowledges contributions from security researchers through responsible disclosures.

Rainforest matches the query for responsible disclosure because they have a responsible disclosure policy, provide a clear process for reporting security vulnerabilities, commit to not taking legal action against individuals who follow their responsible disclosure policy, and acknowledge individuals who report security vulnerabilities responsibly by attributing them on the Hall of Fame hosted on their website.

Zepto has a Responsible Disclosure Policy for security vulnerabilities and offers a Hall of Fame recognition for security researchers, which indicates they acknowledge and reward individuals who report security vulnerabilities responsibly.

Dolby Laboratories has a responsible disclosure policy for reporting security vulnerabilities.

AvidXchange offers a Responsible Disclosure Program for reporting security vulnerabilities, which aligns with the query criteria.

FamPay has a responsible disclosure policy for reporting vulnerabilities, provides rewards for responsible disclosure of in-scope issues and exploitation techniques, and commits to security.

ShapeShift has a Responsible Disclosure Program to incentivize security researchers to report vulnerabilities.