Blog

Expert insights on vulnerability disclosure, security research, and responsible disclosure best practices.

Plattform-Technologie Articles

6 articles

Defining Scope in Vulnerability Disclosure Programs

Plattform & Technologie 7 min

#VDP

Defining Scope in Vulnerability Disclosure Programs

Clear scope in your vulnerability disclosure policy determines what researchers should test. Get it wrong and you'll discourage valid research or deal with unwanted testing.

Patrik Grobshäuser

Sep 28, 2025

Read

GDPR and Vulnerability Disclosure: What You Need to Know

Plattform & Technologie 7 min

#Compliance #GDPR #VDP

GDPR and Vulnerability Disclosure: What You Need to Know

GDPR creates obligations around data breaches that intersect with vulnerability management. Understanding this intersection prevents compliance problems.

Patrik Grobshäuser

Sep 12, 2025

Read

CVSS Scoring: Understanding Vulnerability Severity

Plattform & Technologie 7 min

#CVSS #VDP

CVSS Scoring: Understanding Vulnerability Severity

CVSS provides numerical vulnerability severity ratings, but it's frequently misunderstood. Learn what CVSS actually measures and where it falls short.

Patrik Grobshäuser

Aug 05, 2025

Read

Bug Bounty vs VDP: Understanding the Difference

Plattform & Technologie 6 min

#Bug Bounty #VDP

Bug Bounty vs VDP: Understanding the Difference

Bug bounty programs and vulnerability disclosure programs serve different purposes. Understanding the distinction affects costs, legal implications, and researcher relationships.

Patrik Grobshäuser

Jun 22, 2025

Read

Understanding Coordinated Disclosure Timelines

Plattform & Technologie 6 min

#Coordinated Disclosure #VDP

Understanding Coordinated Disclosure Timelines

Coordinated disclosure requires balancing fix time against user exposure. Understanding the 90-day standard and when exceptions make sense.

Patrik Grobshäuser

Apr 10, 2025

Read

Implementing security.txt: A Practical Guide

Plattform & Technologie 4 min

#security.txt #VDP

Implementing security.txt: A Practical Guide

RFC 9116 standardizes security contact information, but many implementations get the details wrong. Learn what you need to know for proper implementation.

Patrik Grobshäuser

Feb 15, 2025

Read

Popular Tags

#Bug Bounty #Compliance #Coordinated Disclosure #CVSS #GDPR #security.txt #Sicherheitsforschung #VDP #Zero-Knowledge

Blog

Featured Articles

Choosing the Right Vulnerability Disclosure Platform

Plattform-Technologie Articles

Defining Scope in Vulnerability Disclosure Programs

GDPR and Vulnerability Disclosure: What You Need to Know

CVSS Scoring: Understanding Vulnerability Severity

Bug Bounty vs VDP: Understanding the Difference

Understanding Coordinated Disclosure Timelines

Implementing security.txt: A Practical Guide

Categories

Popular Tags

Recent Articles

Choosing the Right Vulnerability Disclosure Platform

Defining Scope in Vulnerability Disclosure Programs

GDPR and Vulnerability Disclosure: What You Need to Know

CVSS Scoring: Understanding Vulnerability Severity

Bug Bounty vs VDP: Understanding the Difference

Support

Start a conversation

Blog

Featured Articles

Choosing the Right Vulnerability Disclosure Platform

Plattform-Technologie Articles

Defining Scope in Vulnerability Disclosure Programs

GDPR and Vulnerability Disclosure: What You Need to Know

CVSS Scoring: Understanding Vulnerability Severity

Bug Bounty vs VDP: Understanding the Difference

Understanding Coordinated Disclosure Timelines

Implementing security.txt: A Practical Guide

Categories

Popular Tags

Recent Articles

Choosing the Right Vulnerability Disclosure Platform

Defining Scope in Vulnerability Disclosure Programs

GDPR and Vulnerability Disclosure: What You Need to Know

CVSS Scoring: Understanding Vulnerability Severity

Bug Bounty vs VDP: Understanding the Difference

Cookie Settings

Support

Start a conversation