Is zerodisclo.com a Scam? Security Check Results - YesWeHack

AI Summary

ZeroDisclo.com is a non-profit platform dedicated to facilitating coordinated vulnerability disclosure by providing a secure and confidential environment for security researchers and organizations. The platform addresses key barriers such as legal uncertainty, lack of proper disclosure channels, and communication inefficiencies by partnering with CERTs and leveraging the expertise of YesWeHack. The website presents a clear focus on security research community needs and coordinated disclosure processes. Technically, the website is built using modern JavaScript frameworks including Vue.js and Quasar, hosted via Gandi SAS. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. No major technical issues or vulnerabilities were detected in the provided content, and HTTPS is enforced with a stable domain registration. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks advanced security headers and explicit incident response contact details. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The absence of contact information and security policy details limits transparency. Overall, the security posture is solid but could be improved with additional controls and disclosures. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security culture. The platform is well-positioned as a trusted facilitator in the vulnerability disclosure ecosystem.