HackerOne offers a Vulnerability Disclosure Program (VDP) for responsible vulnerability disclosure, provides a Bug Bounty program to incentivize the discovery of vulnerabilities, and is known for its commitment to responsible disclosure practices, including not taking legal action against individuals who follow their responsible disclosure policy.
Responsible disclosure
Rainforest matches the query 'responsible disclosure' because they have a responsible disclosure policy, provide a clear process for reporting security vulnerabilities, commit to not taking legal action against individuals who follow their responsible disclosure policy, and acknowledge individuals who report security vulnerabilities responsibly by attributing them on the Hall of Fame hosted on their website.
Bugcrowd provides a platform for vulnerability disclosure and offers Bug Bounty programs, which typically include responsible disclosure policies. They utilize a global community of security researchers and provide a clear process for reporting security vulnerabilities. Bugcrowd is known for acknowledging and rewarding individuals who report vulnerabilities responsibly.
EC-Council maintains a Bug Bounty Program, which indicates they have a responsible disclosure policy. This program provides a clear process for reporting security vulnerabilities and typically includes commitments to not take legal action against individuals who follow the policy. Additionally, bug bounty programs often acknowledge and reward individuals who report security vulnerabilities responsibly.
ShapeShift has a Responsible Disclosure Program to incentivize security researchers to report vulnerabilities.
The company maintains a specific policy for responsible disclosure of security vulnerabilities.
Greenwork is committed to ensuring information security and responsible disclosure of vulnerabilities, and acknowledges contributions from security researchers through responsible disclosures.