HackerOne has released a free public benchmarking tool called the Vulnerability Coordination Maturity Model. The VCMM was created to give organizations a tool to benchmark where they are so they can identify and prioritize the areas that need to be improved. HackerOne is in the business of vulnerability disclosure and bug bounty programs helping customers implement solid strategies for communicating and resolving vulnerabilities effectively. As the concept of bug bounties gains more mainstream traction more organizations realize they need to have processes and policies in place to govern how vulnerabilities are communicated and managed.”]