Disclosure Management
Want to be able to accept security reports without investing the time and resource? All plans include a VDP and security.txt tailored to your needs ready for your review.
Pay as you go $200* / triaged report
Per-report pricing to get up and running without the initial outlay of the Basic plan.
- Report review & triage by a dedicated professional
- Spam and out of scope reports filtered before they hit your team
- Only charged when validation or follow-up is required with the researcher
- No monthly commitment or minimum term
- Report acknowledgement and follow-up within agreed timelines
- Tailoring of a VDP to your stage and goals
- Move to a managed plan whenever volume picks up
Basic $2500* / year
A fully managed disclosure channel for organisations getting started with vulnerability disclosure.
- Report review & triage by a dedicated professional
- Spam and out of scope reports filtered before they hit your team
- Report acknowledgement and follow-up within agreed timelines
- 5 hours of guidance around recommended remediations
- Tailoring of a VDP to your stage and goals
- Disclosure processes followed according to the agreed policy
- Summary reports
Bespoke Custom
A custom program for organisations who are ready to step up their program.
- Everything in Basic
- Co-ordination of some bounty payouts
- Integration with your existing ticketing and security tooling
- Ongoing disclosure program design
- Scope and policy reviews as your systems evolve
Charities & Non-Profit Pricing
Doing the good mahi out in the community? Charities and non-profits can apply to get our basic package at a discount.