What is disclose.io

Disclose.io is a cross-industry, vendor-agnostic standardization project for safe harbor best practices to enable good-faith security research.

We provide free, open-source tools and data to help establish and improve vulnerability disclosure programs and an easily recognizable seal for those taking part in “Neighbourhood Watch for the Internet.”

tug-of-war.svg

Powered by experts

With the help of expert maintainers and by harnessing the power of open-source, disclose.io provides:

  • Free boilerplate policies, tools, contact lists, and data-sets;
  • A straight-forward maturity model with recognition of all levels of best practice adoption, and
  • Centralized assistance, information, activism, advocacy for security researchers and those wanting to report security issues.

Vision and Mission

Related Docs