VDP Programs
Search vulnerability disclosure and bug bounty programs in our database.
Get on the List!| Organization | Policy | Contact | Maturity
disclose.io Maturity Levels
security.txtIntake method exists
BasicPublic policy + channel
PartialWon't pursue legal action
FullExplicitly authorises testing + law exemptions
Full+CVDFull + proactive disclosure timeline
Findable → Communicating → Not hostile → Explicitly safe → Accountable
Note: This assessment is not legal advice.
|
Score |
|---|---|---|---|---|
| a5ct | admin@a5ct.com | Basic | 45.0 / 120 | |
| a3security | mail@a3security.org | Basic | 45.0 / 120 | |
| A2x | security@a2x.io | Partial Safe Harbor | 63.4 / 120 | |
| A2group | contact@a2group.llc | Contact Only | 20.0 / 120 | |
| a2gov | it@a2gov.org | Contact Only | 20.0 / 120 | |
| A16z | cirt@a16z.com | Full Safe Harbor + CVD | 100.0 / 120 | |
| A11k | security [at] a11k [dot] net | Contact Only | 20.0 / 120 | |
| A1 | https://a1.agency/.well-known/security.txt | Contact Only | 20.0 / 120 | |
| 50plusmatch | info@50plusmatch.nl | Contact Only | 20.0 / 120 | |
| 411homerepair | abuse@411homerepair.com | Contact Only | 20.0 / 120 | |
| 2gosoftware | techniek@2gosoftware.nl | Contact Only | 20.0 / 120 | |
| 2brightsparks | security@2brightsparks.com | Partial Safe Harbor | 64.4 / 120 | |
| 23andme | https://www.23andme.com/security-report/ | Contact Only | 20.0 / 120 |
