Repository files navigation

Driving simplicity, safety, and standardization in vulnerability disclosure.

disclose.io is a collaborative and vendor-agnostic movement that engagements security researchers, corporate and independent legal experts, and industry leaders from all around the world.

The goal of the project is to support the accelerated the adoption of vulnerability disclosure best practices includingbi-lateral safe harbor, readability for non-legal and non-native language audiences, and a recognizable mark of solidarity with the disclose.io movement.

(Note: While we've engaged the legal opinion of many, this does not constitute legal advice. Please consult your legal counsel for the specific suitability of the disclose.io terms in your organization.)

1. Choose thelegal terms that best fit your vulnerabilty disclosure or bug bounty progam.
2. Add the appropriatedisclose.io logo to your public program brief.
3. Submit a pull request to your program to the open-source disclose.ioprogram list.
4. Let the world know you're joining the movement! Here are someexamples of others who have.
5. Contribute back! We're looking for lawyers, hackers, and experts to collaborate. Check ourissues log.

disclose bydisclose.io is licensed under aCreative Commons Attribution 4.0 International License.