Security policies and vulnerabilities reporting process for Xpanse projects are documented on our website here.