Coordinated disclosure

The arrangement under which a security researcher reports a vulnerability privately, the vendor fixes it within a stated window, and publication follows the fix rather than preceding it. A published disclosure policy is the difference between receiving the report and reading about it.