This document outlines GitHub's policy for the coordinated disclosure of security vulnerabilities. It encourages security researchers to report any discovered vulnerabilities to GitHub to help maintain platform safety. The document also introduces GitHub's bug bounty program, which rewards researchers for their efforts in identifying and reporting bugs.