# secur0 Docs

> Guides and answers for organizations and hackers on the secur0 platform.

secur0 Docs is the official help center of secur0, the Spanish offensive security platform that connects organizations with a community of verified ethical hackers through vulnerability disclosure programs (VDP), pentesting, crowdsourced pentesting and bug bounty.

It publishes the platform rules for organizations and researchers, the triage policy used to validate and score reports, EGAD! (the CVSS 4.0 scoring guide per vulnerability type) and answers to frequently asked questions, including CVE assignment.

secur0 is a CVE Numbering Authority (CNA) authorized by MITRE, so it can assign and publish CVE identifiers for vulnerabilities reported through its programs. Documentation is published in Spanish and English; the triage policy is currently available in Spanish only.

Last updated: 2026-09-30

## EGAD!

Secur0's public reasoning on CVSS 4.0 scoring. One leaf per vulnerability class: the vector, the per-metric reasoning, and where the line sits.

- [EGAD!](https://docs.secur0.com/en/collections/egad/)
- [What is EGAD!](https://docs.secur0.com/en/articles/what-is-egad/): Secur0's public reasoning on CVSS 4.0 scoring: what EGAD! is, what a leaf contains, and how to challenge one.
- [Contributing to EGAD!](https://docs.secur0.com/en/articles/contributing-to-egad/): General guidelines: where to find the GitHub repository, what we expect from you, and what you can expect from us.
- [Scoring Insecure Direct Object References](https://docs.secur0.com/en/articles/scoring-idors/): CVSS4.0 interpretation applied to IDOR vulnerabilities in web applications.
- [Scoring Cross-Site Scripting](https://docs.secur0.com/en/articles/scoring-xss/): CVSS4.0 interpretation applied to XSS vulnerabilities in web applications.
- [Scoring HTML Injection](https://docs.secur0.com/en/articles/scoring-htmli/): CVSS4.0 interpretation applied to HTMLi vulnerabilities in web applications.
- [Scoring Information Disclosure](https://docs.secur0.com/en/articles/scoring-information-disclosure/): CVSS4.0 interpretation applied to Information Disclosure vulnerabilities in web applications.

## Frequently Asked Questions

Q&A about common issues.

- [Frequently Asked Questions](https://docs.secur0.com/en/collections/faq/)
- [CVE assignment FAQ](https://docs.secur0.com/en/articles/faq-cve/): How a CVE is requested at Secur0, how long the process takes, what information is needed, and when a finding can be disclosed.
- [How to write a report](https://docs.secur0.com/en/articles/how-to-write-a-report/): The five questions your report needs to answer, and the behaviour we do not accept during triage.

## More information

- [Full text of every article](https://docs.secur0.com/en/llms-full.txt)
- [Versión en español](https://docs.secur0.com/llms.txt)
- [secur0.com: platform, services and case studies](https://secur0.com)
- [secur0.com llms.txt: verifiable facts about the company](https://secur0.com/llms.txt)