Coordinated Disclosure

A security vulnerability disclosure practice in which the finder first notifies the vendor privately, both parties agree on an embargo period, and details are made public only after the vendor prepares a patch, balancing security and transparency.