We will not sue or swat you for responsible disclosure clause

To encourage security researchers to not be afraid of disclosing their finding, there should be a registry or a standardised clause that businesses can sign up to or register.

This will have a contractual clause that a security researcher who have conducted all reasonable efforts to disclose the vulnerability will not in anyway be attacked by the company in question for disclosing the vulnerability. (e.g. via sending the FBI to raid the security researcher.)