VDP Programs

Search vulnerability disclosure and bug bounty programs in our database.

Get on the List!
Organization Policy Contact Maturity
disclose.io Maturity Levels
security.txtIntake method exists
BasicPublic policy + channel
PartialWon't pursue legal action
FullExplicitly authorises testing + law exemptions
Full+CVDFull + proactive disclosure timeline
Findable → Communicating → Not hostile → Explicitly safe → Accountable
Learn more about diostatus
Note: This assessment is not legal advice.
 Score
uptimeobserver support@uptimeobserver.com Basic 46.7 / 120
upto security@upto.se Basic 45.0 / 120
uptrends support@uptrends.com Basic 45.0 / 120
uptrusthq security@uptrusthq.com Basic 45.0 / 120
Upwork Contact Only 20.0 / 120
Upwork (formerly oDesk) Basic VDP 43.7 / 120
uq.edu csoc@uq.edu.au Basic 45.0 / 120
UR security@ur.io Full Safe Harbor + CVD 100.0 / 120
Urban Company Contact Only 20.0 / 120
urbandictionary support@urbandictionary.com Basic VDP 42.7 / 120
urbanesecurity techops+vulndisclosure@urbanesecurity.com Basic 46.7 / 120
urbanity admin@urbanity.pl Basic 45.0 / 120
Urbanmind.net https://www.urbanmind.net/tos Contact Only 20.0 / 120
urbanrain abuse@urbanrain.se Basic 45.0 / 120
Urdax Dantxarinea https://urdax-dantxarinea.com/.well-known/secur... Basic 45.0 / 120
ureka.utwente www@ureka.utwente.nl Basic 45.0 / 120
Urfahayat security@urfahayat.com Contact Only 20.0 / 120
urlabuse info@urlabuse.com Basic 45.0 / 120
Urlbox security@urlbox.com Basic 46.7 / 120
ursa admin@ursa.fi Basic 45.0 / 120
URSA Consulting Group https://www.ursaconsulting.group/ Basic 45.0 / 120
Urubu security@urubu.host Basic 48.3 / 120
urveye security@urveye.com Full 88.3 / 120
usa cpu@usa.com Basic 45.0 / 120
Usaa disclosure@usaa.com Partial 71.7 / 120
Showing 25301 to 25325 of 27,823 programs
< 1 ... 1012 1013 1014 ... 1113 >