Chris Evans' work on the Dropbox VDP.
Amit Elazari’s #legalbugbounty, BSidesSF 2018, USENIX Enigma 2018.
Bugcrowd and CipherLaw’s Open Source Vulnerability Disclosure Framework.
Disclose.io's collaborative and vendor-agnostic project to standardize best practices around safe harbour for good-faith security research.