Responsible Disclosure

The practice of privately reporting discovered vulnerabilities or harmful behaviours in AI systems to the developer before making them public, allowing time for remediation.

When you find a problem in someone's AI, you tell them privately first and give them time to fix it before going public. It's the polite and responsible way to report vulnerabilities.

Responsible disclosure is a governance best practice that should be part of your AI security policy. Establishing clear channels for reporting AI vulnerabilities encourages ethical reporting and gives your organisation time to address issues.