VDP Programs
Search vulnerability disclosure and bug bounty programs in our database.
Get on the List!| Organization | Policy | Contact | Maturity
disclose.io Maturity Levels
security.txtIntake method exists
BasicPublic policy + channel
PartialWon't pursue legal action
FullExplicitly authorises testing + law exemptions
Full+CVDFull + proactive disclosure timeline
Findable → Communicating → Not hostile → Explicitly safe → Accountable
Note: This assessment is not legal advice.
|
Score |
|---|---|---|---|---|
| U.S. Department of the Interior | BOEMPublicAffairs@boem.gov | L3 Partial Safe Harbor | 66.9 / 120 | |
| U.S. Department of State | L3 Partial Safe Harbor | 68.6 / 120 | ||
| U.S. Department of Energy | webmaster@openei.org | L4 Full | 91.7 / 120 | |
| U.S. Department of Defense | L0 Not Present | — | ||
| usd AG | https://www.usd.de/meldung-bug-oder-schwachstelle/ | L3 Partial | 70.0 / 120 | |
| Usd1redeemable | https://usd1redeemable.com/about | L2 Basic | 43.3 / 120 | |
| U.S. Commission on Civil Rights | ccrsoc@usccr.gov | L5 Full+CVD | 113.3 / 120 | |
| Us & Cheesecake | info@usandcheesecake.si | L2 Basic | 45.0 / 120 | |
| usc.edu | secops@usc.edu.au | L2 Basic | 45.0 / 120 | |
| usb-lock-rp | info@usb-lock-rp.com | L2 Basic | 45.0 / 120 | |
| Usave | user@example.com | L2 Basic | 45.0 / 120 | |
| usasooq | security@usasooq.com | L2 Basic | 45.0 / 120 | |
| Usarmyband | matthew.l.smith140.mil@army.mil | L2 Basic | 45.0 / 120 | |
| Usamap | rockk45@gmail.com | L2 Basic | 45.0 / 120 | |
| USAGM | vulnerability_disclosure@usagm.gov | L4 Full | 91.7 / 120 | |
| Usacycling | cpatterson@usacycling.org | L2 Basic | 45.0 / 120 | |
| Usaa | disclosure@usaa.com | L3 Partial | 71.7 / 120 | |
| usa | cpu@usa.com | L2 Basic | 45.0 / 120 | |
| urveye | security@urveye.com | L4 Full | 88.3 / 120 | |
| Urubu | security@urubu.host | L2 Basic | 48.3 / 120 | |
| URSA Consulting Group | https://www.ursaconsulting.group/ | L1 Contact Only | 20.0 / 120 | |
| ursa | admin@ursa.fi | L2 Basic | 45.0 / 120 | |
| Urlbox | security@urlbox.com | L2 Basic | 46.7 / 120 | |
| urlabuse | info@urlabuse.com | L2 Basic | 45.0 / 120 | |
| Urfahayat | security@urfahayat.com | L1 Contact Only | 20.0 / 120 |
