Running With Scissors - The Disclose.io Blog (Page 3)

Sign in Subscribe

A brief history of vulnerability disclosure and bug bounty

A brief history of vulnerability disclosure and bug bounty

Explore the evolution of vulnerability disclosure from the early days of full disclosure debates through the emergence of bug bounty programs. A comprehensive three-part series by Dennis Fisher covering the history that shaped modern security research.

VIDEO: An intro to disclose.io and hacker safety

VIDEO: An intro to disclose.io and hacker safety

Watch this introductory video explaining what disclose.io does, why hacker safety matters, and how organizations can implement vulnerability disclosure programs that protect both researchers and their systems.

dnssecuritytxt

dnssecuritytxt

DNS-based discovery of security.txt files using the _securitytxt TXT record. Learn how dnssecuritytxt enables organizations to publish vulnerability disclosure contact information through DNS, complementing the traditional .well-known/security.txt approach.

Establishing asset ownership in vulnerability reporting

Establishing asset ownership in vulnerability reporting

How do you verify who actually owns an asset when reporting a vulnerability? This guide covers techniques for establishing asset ownership, avoiding reporting to the wrong party, and ensuring your security research reaches the right people.