Cisco has 800,000 customers and thousands of active products in the market. I think Cisco does an exemplary job on how it handles security both proactively: in design, in development, in production, and in response to disclosures and discoveries. Same with Microsoft, and the other few companies on the planet who operate at this scale.

I think it's easy to find our mistakes, but keep in mind our corporate culture is to shine a light as honestly and transparently as possible on security issues, and we strive to err on the side of caution and communication.

(I work for Cisco)