Do not share confidential client information (even anonymized, the risk is not worth it) - Do not publicly disclose vulnerabilities without authorization - Do not exaggerate your accomplishments (the security community is small and will notice) - Do not engage in public disputes or negativity (it re