Blog
Security research, coordinated-disclosure guidance, and updates from the Harbor team.
Your Inbox Is Your Bottleneck
A year of curl's vulnerability reports shows the real bottleneck is triage, not intake, and 98.7% of nonprofits have not built the door yet.
An Absent Standard: Measuring Vulnerability Disclosure Intake Across the US Nonprofit Sector
A survey of 750 U.S. nonprofits finds just 1.3% publish a way to report a security vulnerability, against 65.9% of federal agencies.