Vulnerability Disclosure

Presentation

Simplified Vulnerability Reporting (aligned with NIS 2 requirements)

Members of a Vulnerability-Lookup instance can easily report vulnerabilities as preliminary advisories in the context of NIS 2. Operators can review these notifications and, if deemed relevant, generate a security advisory directly from Vulnerability-Lookup. The advisory will then be made publicly accessible, similar to those from other sources.

Vulnerability disclosure creation

CVD policy

Coordinated Vulnerability Disclosure process

CIRCL - Coordinated Vulnerability Disclosure (CVD) Policy.
This policy adheres to the principles outlined in Article 12 of the NIS 2 Directive.