secur0 documentation
Guides and answers for organizations and hackers on the secur0 platform.
-
EGAD!
Secur0's public reasoning on CVSS 4.0 scoring. One leaf per vulnerability class: the vector, the per-metric reasoning, and where the line sits.
6 articles
-
Frequently Asked Questions
Q&A about common issues.
2 articles
Featured articles
- What is EGAD!Secur0's public reasoning on CVSS 4.0 scoring: what EGAD! is, what a leaf contains, and how to challenge one.
- Contributing to EGAD!General guidelines: where to find the GitHub repository, what we expect from you, and what you can expect from us.
- CVE assignment FAQHow a CVE is requested at Secur0, how long the process takes, what information is needed, and when a finding can be disclosed.
- How to write a reportThe five questions your report needs to answer, and the behaviour we do not accept during triage.
What you will find in secur0 Docs
secur0 Docs is the official help center of secur0, the Spanish offensive security platform that connects organizations with a community of verified ethical hackers through vulnerability disclosure programs (VDP), pentesting, crowdsourced pentesting and bug bounty.
It publishes the platform rules for organizations and researchers, the triage policy used to validate and score reports, EGAD! (the CVSS 4.0 scoring guide per vulnerability type) and answers to frequently asked questions, including CVE assignment.
secur0 is a CVE Numbering Authority (CNA) authorized by MITRE, so it can assign and publish CVE identifiers for vulnerabilities reported through its programs. Documentation is published in Spanish and English; the triage policy is currently available in Spanish only.