Bugs, Bounties, and Beyond...
We reply immediately
OWASP Project Developer Guide - Document and Project Web pages
The OWASP Guide