Bugs, Bounties, and Beyond...
We reply immediately
OWASP Foundation Web Respository
Software Component Verification Standard (SCVS)