VDP Programs
Search vulnerability disclosure and bug bounty programs in our database.
Get on the List!| Organization | Policy | Contact | Maturity
disclose.io Maturity Levels
security.txtIntake method exists
BasicPublic policy + channel
PartialWon't pursue legal action
FullExplicitly authorises testing + law exemptions
Full+CVDFull + proactive disclosure timeline
Findable → Communicating → Not hostile → Explicitly safe → Accountable
Note: This assessment is not legal advice.
|
Score |
|---|---|---|---|---|
| uplinklabs | steven@uplinklabs.net | L2 Basic | 45.0 / 120 | |
| Uploadcare | bugbounty@uploadcare.com | L2 Basic | 50.0 / 120 | |
| Uploadthing | security@uploadthing.com | L3 Partial | 68.3 / 120 | |
| Upper West Side Story | security@upperwestsidestory.net | L3 Partial | 68.3 / 120 | |
| upr | noc-upr@upr.edu | L2 Basic | 45.0 / 120 | |
| UPS | L3 Partial Safe Harbor | 66.1 / 120 | ||
| Upscale AI | security@upscale.ai | L5 Full+CVD | 111.7 / 120 | |
| Upserve | L1 Contact Only | 20.0 / 120 | ||
| Upspeak | https://www.upspeak.de/rechtliches/datenschutze... | L2 Basic | 43.3 / 120 | |
| Upstaff | security@upstaff.com | L2 Basic | 45.0 / 120 | |
| Upstart | Upstart runs a private bug bounty program. To r... | L1 security.txt | 21.7 / 120 | |
| Upstatement | user@example.com | L2 Basic | 45.0 / 120 | |
| Upstox | L2 Basic VDP | 44.4 / 120 | ||
| Upsun | security@upsun.com | L3 Partial | 73.3 / 120 | |
| upsys-consulting | security@upsys-consulting.com | L2 Basic | 45.0 / 120 | |
| upt | security@upt.pt | L2 Basic | 45.0 / 120 | |
| uptakedigital.com | security@uptakedigital.com.au | L2 Basic | 45.0 / 120 | |
| uptimeobserver | support@uptimeobserver.com | L2 Basic | 46.7 / 120 | |
| upto | security@upto.se | L2 Basic | 45.0 / 120 | |
| uptrends | support@uptrends.com | L2 Basic | 45.0 / 120 | |
| uptrusthq | security@uptrusthq.com | L2 Basic | 45.0 / 120 | |
| Upwork | L1 Contact Only | 20.0 / 120 | ||
| Upwork (formerly oDesk) | L2 Basic VDP | 43.7 / 120 | ||
| uq.edu | csoc@uq.edu.au | L2 Basic | 45.0 / 120 | |
| UR | security@ur.io | L5 Full Safe Harbor + CVD | 100.0 / 120 |