During testing, a critical vulnerability is discovered on a client's core server. Which of the following should be the NEXT action? 

Disable the network port of the affected service. 

Complete all findings, and then submit them to the client. 

Promptly alert the client with details of the finding. 

Take the target offline so it cannot be exploited by an attacker.