Product security incident response team