The disclose.io Directory is an open, searchable index of vulnerability disclosure programs, bug bounty programs, security policies, and official reporting channels. Use it to confirm whether an organization publishes a disclosure policy, identify its preferred security contact, and review the strength of its safe-harbor language before beginning research or submitting a report.
Directory maturity levels summarize how clearly each program supports good-faith research, from a published intake method through explicit authorization and coordinated-disclosure commitments. Records are evidence-based and continuously updated; they are informational, not legal advice. Learn how the levels work in the diostatus documentation.
