AI Security
Policy and Disclosure: 2026 Edition
Project Zero’s disclosure policy combines remediation time with a patch rollout window.
Since 2021, Project Zero has followed a “90 + 30” vulnerability disclosure policy, allowing vendors up to 90 days to remediate a vulnerability plus an extra 30 days “soak time” for patch rollout.
GPZ
Google Project Zero
Source
Google Project Zero
AI Analysis
Generated insight by OnAirToday AI
A defined disclosure window gives vendors time to address vulnerabilities before details are made public. The additional rollout period recognizes that releasing a patch does not mean it has reached users.
Powered by AI • Not a substitute for human analysisMore Insights →
Share
Filed under:AI Security
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.