Disclosure Timeline
Reported and acknowledged
Day 0 · automated confirmation
Severity validated
Day 1 · triage and prioritization
Patch and coordination
Day 2+ · controlled remediation path
Vulnerability Disclosure
Security research,
done right.
A legally safe and structured reporting channel for researchers and organizations. Reduce ambiguity, increase trust, and coordinate remediation with confidence.
Disclosure Policies
Coordinated Disclosure (CVD)
Researcher and organization coordinate around a fix-first timeline before public release.
Full Disclosure
Publish once fixes are confirmed and agreed constraints are met for accountability.
Private Disclosure
Sensitive findings remain private when legal, contractual, or infra constraints require it.
Set up your VDP in minutes
Safe-harbor friendly structure and clear response workflow from day one.