About Harbor
Harbor helps mission-driven organizations run coordinated vulnerability disclosure and bug bounty programs — without needing a dedicated security team.
Our mission
Nonprofits and mission-driven organizations handle sensitive donor, beneficiary, and operational data, but rarely have the resources of a large security team. Harbor gives them a structured, safe way to receive vulnerability reports from the security research community and act on them with confidence.
For organizations
Launch a vulnerability disclosure program in minutes, define what's in scope, and manage incoming reports, triage, and remediation from a single dashboard — with the option to reward researchers through a bug bounty program as your program matures.
For researchers
Browse active programs, submit clear reports within a defined scope, track their status through remediation, and receive bounty payouts securely — all under safe harbor protections extended by participating organizations.
Responsible by design
Every program is built around coordinated disclosure and good-faith research. Clear scope, safe harbor terms, and an auditable communication trail keep both organizations and researchers protected.