disclose/diodb resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1079 stars · 328 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An open, CC0-licensed dataset of vulnerability disclosure programs (VDPs) and bug bounty programs, including their safe-harbor status, policy URLs, and security contacts. It powers the searchable directory at directory.disclose.io and is maintained via community pull requests to program-list.json.

Use cases

• find the security contact for a website or company
• look up whether a bug bounty program offers safe harbor
• check a vendor's vulnerability disclosure policy before reporting a bug
• download a JSON list of all known VDP and bug bounty programs
• research safe-harbor adoption across organizations
• add or correct a company's disclosure program in an open dataset

When to choose

• you are a security researcher deciding where and how to safely report a vulnerability
• you need bulk, version-controlled data on disclosure programs for analysis or tooling
• you want to verify an organization's safe-harbor and maturity status

When to avoid

• you need a live searchable UI rather than raw data - use directory.disclose.io instead
• you need legal advice on disclosure - the maturity scores are explicitly not legal advice
• you want an automated vulnerability scanning or reporting tool - this is only a directory

Facets

dataset · maturity active

security search-engine json security privacy developer-tools python vulnerability-disclosure bug-bounty safe-harbor vdp responsible-disclosure security-txt open-data web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="disclose/diodb")