Never lose a vulnerability
report again
The dead-simple drop-in replacement for security@domain.com. A proper dashboard, structured reports, severity ratings, and real-time status tracking. All in one link.
Features
Everything security@ domain.com isn't
A purpose-built platform for receiving, tracking, and managing vulnerability reports. No more lost emails, no more spreadsheets.
One link, infinite reports
Create a project, get a unique reporting URL. Share it in your README, security.txt, or anywhere. That's it.
Real-time dashboard
See every report as it comes in. Severity ratings, statuses, response tracking — no more digging through email threads.
Filter, search, triage
Sort by severity, status, reporter, or date. Full-text search across all reports. Find anything in seconds.
Structured severity ratings
Every report gets a proper CVSS-style severity rating. Critical, high, medium, low — at a glance.
Never miss a report
Instant notifications when new reports come in. Track which ones need your response. Zero reports lost.
GitHub-native auth
Reporters can sign up with GitHub or email. You know exactly who's reporting. Block bad actors instantly.
How it works
Three steps. That's it.
No complex setup. No procurement process. No sales calls. Just create, share, and start receiving properly structured vulnerability reports.
Create a project
Link a GitHub repo or name a project. Takes 30 seconds. We generate a unique reporting URL for you.
https://zeroday.report/r/your-projectShare your link
Drop it in your security.txt, README, or wherever you currently point people to security@. Done.
# security.txt
Contact: https://zeroday.report/r/your-projectReceive & manage reports
Reports come in structured with severity, details, and reproduction steps. Triage, respond, and resolve — all from one dashboard.
$ 3 new reports → 1 critical, 1 high, 1 mediumComparison
You already know email sucks for this
We're not competing with HackerOne. We're replacing the inbox you're already ignoring.
Pricing
Simple, transparent pricing
Start free for open source. Scale when you need to. No surprise fees, no per-researcher pricing.
Open Source
For individual developers and open source projects.
- 1 project
- Unlimited reports
- Dashboard & search
- Severity ratings
- Email notifications
Team
For teams that ship software and take security seriously.
- Unlimited projects
- Unlimited reports
- Priority support
- Team members
- API access
- Custom branding
Enterprise
For organizations with advanced security requirements.
- Everything in Team
- SSO / SAML
- Audit logs
- SLA guarantee
- Dedicated support
- Email-to-report ingestion
Stop losing vulnerability reports
in your inbox
Join the waitlist and be the first to replace security@domain.com with something that actually works.
Free for open source. Always.