I think it would cut time for both parties, if there would be a public bugtracker like many Open Source projects/github have.
Bugreports can be created fast and communication can take place, where it belongs: the bugtracker.
Actual states can easily be followed and updates can be pushed to anyone subscribed to specific bugs.
Screenshots and information on how to reproduce the issue, can be posted in a convenient way.
Additionally, there is the possibility to offer a bug bounty program.
Let's get bug hunting :D