Security disclosure and private work have some responsible disclosure policies.

I've added added the public bug bounty website for the last one!