Veracode takes the security of its products seriously. You can find the responsible disclosure policy at veracode.com.