For your consideration: a quick instruction for future security researchers.
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+Please report security issues to dev@vestacp.com