Process where researchers privately disclose issues, vendors patch, then public details are released responsibly.