lookup-disclose-io
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only
What it can do
What data it sees
Do you need an account
No: the server works without sign-in
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Server tool list (2)
Raw names from tools/list. Only developers need these.
| lookup_security_contact | Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse contacts, and national/global CERT fallbacks ordered by applicability to the queried owner and asset. This is informational only — not legal advice. |
| classify_asset | Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup. |