FAQ

+ Why are you doing this?

+ Who are you?

+ Where do I report bugs or feature requests?

+ Where can I see previously verified disclosures?

+ Where can I report new vulnerabilities?

+ Where can I find your Privacy Policy?

+ What is the best way to contact a maintainer?

+ What is in scope?

+ What are your plans in the near future?

+ I'm an author/maintainer of a project. What's my role?

+ I'm a maintainer, but don't want to sign up. What should I do?

+ How is the bounty reward calculated?

+ How do you assign CVEs?

+ How do I know if my disclosure or fix has been rewarded?

+ How do I get a CVE for my verified advisory?

+ How do I fund a project?

+ How do I cash out my rewards/bounties?

+ How can I get in touch?

+ How are you funding this?

+ Do you support custom security policies?

+ Can I edit the details of a report?

+ Are reports public or private by default?