Running With Scissors - The Disclose.io Blog (Page 2)

Sign in Subscribe

VIDEO: An intro to disclose.io and hacker safety

VIDEO: An intro to disclose.io and hacker safety

Watch this introductory video explaining what disclose.io does, why hacker safety matters, and how organizations can implement vulnerability disclosure programs that protect both researchers and their systems.

dnssecuritytxt

dnssecuritytxt

DNS-based discovery of security.txt files using the _securitytxt TXT record. Learn how dnssecuritytxt enables organizations to publish vulnerability disclosure contact information through DNS, complementing the traditional .well-known/security.txt approach.

Establishing asset ownership in vulnerability reporting

Establishing asset ownership in vulnerability reporting

How do you verify who actually owns an asset when reporting a vulnerability? This guide covers techniques for establishing asset ownership, avoiding reporting to the wrong party, and ensuring your security research reaches the right people.

Request For Comment: dioterms open-source VDP policy

Request For Comment: dioterms open-source VDP policy

Request for comment on dioterms, the disclose.io open-source vulnerability disclosure policy template. Help shape the future of standardized VDP language by providing feedback on safe harbor provisions and researcher protections.

2020: A Good Year for Hackers

2020: A Good Year for Hackers

A look back at 2020's major wins for the security research community — from CFAA reform progress to expanded safe harbor provisions. How the year shaped the future of ethical hacking and vulnerability disclosure.