Security Policy Mozilla has a well-defined process for handling security vulnerabilities based around responsible disclosure.