We do not have a clear policy at the moment, and and are just very gratefully if you contact us when a security issue is found.