this is formalizing some very enterprise-esque processes for security research, software resellers anyone?