Update SECURITY.md

Co-authored-by: gerbrand-bosch <[email protected]>

Author: annejan

SECURITY.md

@@ -42,10 +42,10 @@ But complex vulnerabilities may require further explanation.
 - We strive to respond to your report within 1 business days with our evaluation of the report and an expected resolution date. We will adhere to the NCSC.nl policy of a 60 day disclose and publish.
 - If you have followed the instructions above, we will not take any legal action against you concerning the report.
 - We will not pass on your personal details to third parties without your permission, unless it is necessary to comply with a legal obligation. Reporting under a pseudonym or anonymous is possible.
-- We will keep you informed of the progress towards resolving the problem.
-- In the public information concerning the reported problem, we will give your name as the discoverer of the problem (unless you desire otherwise).
+- We will keep you informed of the progress towards resolving the finding.
+- In the public information concerning the reported finding, we will give your name as the discoverer of the problem (unless you desire otherwise).
 
-We strive to resolve all problems as quickly as possible, and we would like to play an active role in the ultimate publication on the problem after it is resolved.
+We strive to resolve all findings as quickly as possible, and we would like to play an active role in the ultimate publication on the finding after it is resolved.
 
 This Responsible Disclosure policy is based on an example written by Floor Terra and the [Responsible Disclosure Guideline of the NCSC](https://english.ncsc.nl/publications/publications/2019/juni/01/coordinated-vulnerability-disclosure-the-guideline).