Zero Day Initiative (ZDI) is the middleman between security researchers and software vendors, submitting bugs to the latter and pressuring them to fix the issue within 120 days before making a public solution available.