appsec 2 Web Security Attack Surface Map Feb 25, 2026 Responsible Disclosure — Open Bug Bounty Outstanding Security Research Award Nov 2, 2025