Idk how to respond to this. I'm too autistic. Felt appropriate to tag you since I thought I saw you call out how many critical vulns you've discovered with the red team.

we don't disclose which projects we scan, or the results

@calle No one ever said you disclosed which projects you scan. @aljaz was simply saying to stop signaling that you're finding critical vulns because this can act as an incentive for ill-intended hackers. You're basically putting extra pressure on the red team by saying "we've found bugs".