Built for the Paranoid those who Care
Type a message and watch it get encrypted in your browser. No data is sent to any server.
Encrypted with RSA-2048 + AES-256-GCM
Using Web Crypto API • Zero-knowledge architecture
Try Full Demo →Simple workflow: encrypt, submit, decrypt locally.
Encrypted with your public key
Server stores encrypted blobs only
Decrypted in your environment
Accept, triage, and retain vulnerability reports with client‑side encryption. Your private key never leaves your environment — we only store ciphertext.
Zero-knowledge encryption ensures data protection by design. Personal data never exists in plaintext on servers, supporting GDPR data minimization principles.
Track report status, timestamps, and severity levels. Export data via API for your own documentation needs.
Safe harbor policy templates and coordinated disclosure guidelines help establish legal foundations for vulnerability programs.
Whether you're a startup or enterprise, our platform adapts to your security needs.
Launch your vulnerability disclosure program quickly without compromising on security. Perfect for companies just starting their security journey.
Maintain complete control over your vulnerability data with zero-knowledge encryption. Your private keys never leave your environment, ensuring true data sovereignty.
Triage vulnerabilities efficiently with encrypted reports. Integrate with your existing security tools via our comprehensive API.
Stay updated with security research and best practices
A technical comparison of vulnerability disclosure approaches from security.txt to full bug bounty platforms. Understanding the security trade-offs at each maturity level.
Read more
Clear scope in your vulnerability disclosure policy determines what researchers should test. Get it wrong and you'll discourage valid research or deal with unwanted testing.
Read more
GDPR creates obligations around data breaches that intersect with vulnerability management. Understanding this intersection prevents compliance problems.
Read moreEverything you need to know about our platform
Reports are encrypted on the researcher's device using your public key before submission. Our servers only store encrypted data (ciphertext). Decryption happens locally in your environment using your private key, which never leaves your control.
Yes! Our REST API allows you to integrate with SIEM systems, ticketing platforms, and other security tools. Export encrypted reports, manage statuses, and sync data with your existing infrastructure.
Since we operate on zero-knowledge principles, we cannot recover your private key. However, you can generate a new key pair and update your program's public key. Make sure to securely backup your private key when you first generate it.
We offer Sandbox (free for testing) and Pro (€25/month per program for production use). Sandbox allows you to test the platform with private, inactive program pages. Pro enables public program pages and accepts submissions. Check our pricing page for full details.
Researchers visit your public program page, fill out a simple form, and the report is automatically encrypted with your public key before submission. No special software or technical knowledge required on their end.
Launch your vulnerability disclosure program quickly with our simple setup process
Sign up for free. No credit card required to start testing.
Create your encryption key pair. Your private key stays in your browser.
Create your program page and start accepting encrypted reports.
Professional tools to build and manage your security disclosure program.
Search and discover active bug bounty and vulnerability disclosure programs from major platforms.
Browse programsGenerate professional vulnerability disclosure policies with customizable sections and legal compliance.
Create policyCreate RFC 9116 compliant security.txt files to help researchers contact your security team.
Generate fileLearn how to establish and manage effective vulnerability disclosure programs.
Read guideUnderstand and create safe harbor policies that protect security researchers.
Learn moreLearn systematic approaches to evaluating and prioritizing security vulnerabilities.
View guideGet support from our team via chat