Vonage interview question

How do you deal with developers in vulnerability patching process?