Fastest fix for responsible disclosure I've seen
Last week I was trying to buy something to fix a bicycle tire.
I ended up on BikeBudget and while looking around found a security vulnerability.
After reporting it on friday their response was the fastest and nicest I’ve seen! Within an hour the vulnerability was fixed and they mailed me.
In the end they offered to send me the tire fixing set for free, and they sent me a whole box of swag! Thanks! That’s really nice.
Picture of the swag and thank you note: