Bugs, Bounties, and Beyond...
We reply immediately
OWASP Foundation Web Respository
Application Security Verification Standard