Tracking which JSE-listed companies have vulnerability disclosure programs, security.txt files, and responsible disclosure policies.