Vulnerability Disclosure Policies (VDP) offer you a safe space to report vulnerabilities. If the organisation you're looking for is not listed here, try to find it on FireBounty ↗ . VDP programs are not eligible to bounty rewards, nor do they offer ranking points.