What is disclose.io
The open, vendor-neutral infrastructure that powers vulnerability disclosure and security reporting.
On this page
disclose.io is the open, vendor-neutral infrastructure that powers vulnerability disclosure and security reporting. We make it safe, simple, and standardized for everyone.
We didn’t join this movement. We started it. disclose.io is the vendor-neutral home for safe harbor, and we publish the free, lawyer-reviewed policy language (dioterms, CC0) the ecosystem runs on.
One mission, many tools
Open, vendor-neutral properties, each answering a real question:
- Standards: dioterms (safe-harbor language) and dnssecuritytxt (contacts at the DNS layer).
- Tools: policymaker (draft a policy), lookup (find who to report to), and vault (coordinate disclosure).
- Data: directory.disclose.io, the open system of record for every program.
- Record and commons: /threats, community.disclose.io, and the weekly PolicyPulse.
Powered by experts
Open-source and expert-maintained, disclose.io provides:
- Free policies, tools, contact lists, and data;
- A maturity model that recognizes every level of adoption; and
- Help for researchers and anyone reporting a security issue.
