Just say you are a security research company. That is how the situation in question is getting by.