Tanya Janca with an evergreen list of tips and notes on the ins and outs of securely, safely, and legally reporting vulns.

Tip: Do not demand or ask for money in exchange for the vulnerability. That is extortion, and generally illegal. Plus, it will start the conversation on the wrong foot.