disclose.io :verified:
disclose@infosec.exchange
<p>Free open-source tools to standardize, normalize, and promote the adoption of vulnerability reporting and disclosure. <a href="https://infosec.exchange/tags/internetimmunesystem" class="mention hashtag" rel="tag">#<span>internetimmunesystem</span></a> <a href="https://infosec.exchange/tags/hacktheplanet" class="mention hashtag" rel="tag">#<span>hacktheplanet</span></a></p>
Posts
-
Post #4503252
Thanks everyone for your lookup.disclose.io feedback at #hackersummercamp this year, we got a TONNE of it and have made some pretty tasty updates over the weekend... 👀 • Owner-first routing: results lead with the owner's own reporting route • New evidence panel: see why we attributed an asset • Provenance + confidence on every contact • One clear recommended next step • Live progress instead of a spinner Free, no login: https://lookup.disclose.io
-
Post #4203982
Ahead of Hacker Summer Camp we've collected everything disclose.io makes on one page: the program directory, the security-contact lookup engine, safe-harbor terms, and the policy generators. All open source and free. We'll feature them one at a time from now to DEF CON. https://go.disclose.io/
-
Post #3943045
Five governments (CISA, NSA, UK, NL, Japan) just published joint guidance on how to run a vulnerability disclosure program: safe harbor, security.txt, a CVE for every finding, no gag NDAs. Soft law, not statute, but now a citable five-government benchmark. This week's Policy Pulse: https://blog.disclose.io/policy-pulse-issue-25-week-of-july-18-2026/ #VulnerabilityDisclosure #CyberPolicy