VDP Programs
Search vulnerability disclosure and bug bounty programs in our database.
| Organization | Policy | Contact | Maturity
disclose.io Maturity Levels
security.txtIntake method exists
BasicPublic policy + channel
PartialWon't pursue legal action
FullExplicitly authorises testing + law exemptions
Full+CVDFull + proactive disclosure timeline
Findable → Communicating → Not hostile → Explicitly safe → Accountable
Note: This assessment is not legal advice.
|
Score |
|---|---|---|---|---|
| octopuslabs | hello@octopuslabs.io | Basic | 45.0 / 120 | |
| ocuco | support@ocuco.com | Basic | 45.0 / 120 | |
| oda | security@oda.com | Basic | 46.7 / 120 | |
| oda (oda.com) | security@oda.com | Basic | 46.7 / 120 | |
| Odaseva | vulnerability@odaseva.com | Full | 88.3 / 120 | |
| odav | unternehmenssicherheit@odav.de | Basic | 45.0 / 120 | |
| oddity | security@oddity.com | Basic | 45.0 / 120 | |
| oddtime | security@oddtime.net | Basic | 45.0 / 120 | |
| odee | pawel@odee.pl | Basic | 45.0 / 120 | |
| Odeon | https://odeon.co.uk/.well-known/security-policy... | Basic | 43.3 / 120 | |
| Odete | odete@odete.com.br | Basic | 45.0 / 120 | |
| od-groningen | Informatiebeheer@od-groningen.nl | Basic | 45.0 / 120 | |
| odh | security@odh.nl | Basic | 46.7 / 120 | |
| odi | odi@odi.ch | Basic | 45.0 / 120 | |
| Odido | security@blueconic.com | Basic | 45.0 / 120 | |
| odifi | contact@odifi.com | Basic | 45.0 / 120 | |
| Odijmond | https://odijmond.nl/.well-known/security.txt | Basic | 45.0 / 120 | |
| Odin Groep | responsible-disclosure@odin-groep.nl | Full | 90.0 / 120 | |
| Odnzkg | applicatiebeheer@odnzkg.nl | Basic | 45.0 / 120 | |
| Odoo | security@odoo.com | Basic | 43.3 / 120 | |
| odrive | support@odrive.com | Basic | 45.0 / 120 | |
| odweinbau | sec@odweinbau.de | Basic | 45.0 / 120 | |
| OdyseeTeam | security@odysee.com | Basic | 45.0 / 120 | |
| Odyssee | hello[at]undefined.fr / www.undefined.fr | Basic | 45.0 / 120 | |
| Odyssee Conseil | security[at]digdeo.fr | Basic | 45.0 / 120 |
