These Terms and Conditions (the "Agreement"), effective on either the mutual signing of a Master Service Agreement ("MSA"), or the registration of or accepting an invitation to register an account with Discloze, are made by and between Discloze, Inc. ("Discloze") and the customer. The parties agree to be bound by the following terms.
Discloze, Inc. is a Delaware corporation with its principal place of business in Manhattan Beach, California.
When you register with Discloze, you must provide accurate, current, and complete information. You are solely responsible for maintaining the confidentiality of your login credentials and for all activities under your account. You agree to notify us immediately of any unauthorized use of your account or any other breach of security.
All content, materials, reports, scripts, software, and tools provided or made available by Discloze, Inc. are protected by United States and international copyright laws.
Unless expressly authorized in writing, you may not:
All rights are reserved. Unauthorized use of any Discloze intellectual property may result in legal action.
All proprietary methodologies, testing frameworks, findings, deliverables, and related materials remain the sole property of Discloze unless otherwise agreed in writing.
You may not reproduce, distribute, reverse-engineer, or create derivative works from any Discloze intellectual property without prior written consent.
By submitting risks, vulnerabilities, reports, or any form of content to Discloze, you grant us a royalty-free, perpetual, irrevocable, worldwide, non-exclusive right and license to use, copy, modify, display, archive, store, distribute, reproduce, and create derivative works from such content, in any form, media, software, or technology now existing or developed in the future, for any lawful purpose related to our business operations.
Notwithstanding the foregoing, Discloze will treat any content identified as confidential in accordance with our confidentiality obligations and will not publicly disclose proprietary client information without written consent.
To the fullest extent permitted by applicable law, you waive and agree never to assert any claim of moral rights in the content you submit to Discloze, including without limitation the rights to:
(i) be identified as the author of the content;
(ii) object to any modification, adaptation, or other alteration of the content; or
(iii) withdraw the content from public use.
“Moral rights” means any rights of paternity, attribution, integrity, disclosure, and withdrawal, and any similar rights existing under the law of any country in the world, or under any treaty, regardless of whether such rights are referred to as “moral rights.”
Both parties agree to protect each other’s confidential information, with exceptions for legal disclosure obligations.
Discloze may include weblogs, testimonials, risk reports, vulnerability submissions, and other similar content in which users can express opinions and share information. While we make every commercially reasonable effort to monitor this content, you may be exposed to material that is offensive, indecent, inaccurate, misleading, or otherwise objectionable. You agree that you must evaluate and bear all risks associated with the use of Discloze and any content within.
If you believe that any content infringes upon copyrights you own, please contact us pursuant to the procedures outlined under Sections 512(c)(3) and 512(d)(3) of the Digital Millennium Copyright Act (Title 17 U.S.C. § 512), including:
DMCA notices should be sent to legal@discloze.com.
Services are provided “as is” and “as available” without warranties. We do not guarantee uninterrupted access and are not responsible for any delays, failures, or interruptions in service.
You agree that we will not be liable for any consequential, indirect, special, exemplary, or incidental damages arising out of or in connection with your use of or inability to use the Discloze platform, or for any claim made against you by any other party, whether arising from mistakes, omissions, interruptions, deletion of files or emails, errors, defects, viruses or other malicious code, delays in operations or transmission, or any failure of performance, even if we have been advised of the possibility of such damages.
You also agree that under no circumstances will we be liable in any way for any content or for any loss or damage of any kind incurred as a result of the use of any content submitted, posted, emailed, or otherwise made available on the Discloze platform.
Discloze may terminate your profile, and content or information that you have posted on the Discloze platform, and/or prohibit you from using the site or any portion of it, for any reason, at any time, in its sole discretion, with or without notice, including if we believe that you are not in compliance with this Agreement.
By registering with Discloze, you agree that the laws of the State of Delaware, without regard to principles of conflict of laws, will govern this Agreement and any dispute of any sort that might arise between you and us.
With respect to any disputes or claims, you agree not to commence or prosecute any action in connection therewith other than in the state and federal courts of California, and you hereby consent to, and waive all defenses of lack of personal jurisdiction and forum non conveniens with respect to, venue and jurisdiction in the state and federal courts of California.
We may update these terms at any time. Continued use constitutes acceptance.
Discloze, Inc. (“Discloze,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, services, and platforms.
By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, you must not use our website or services.
This Privacy Policy applies to:
This policy does not apply to third-party websites, services, or applications, even if they are linked from our site. We are not responsible for the privacy practices of any third-party sites.
We may collect and store the following categories of personal information that you provide to us:
When you interact with our website or services, we automatically collect:
We may receive personal information from:
We process personal information for the following purposes:
If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal data under the following legal bases:
We do not sell personal information. We may share information:
A. With Service Providers: Vendors who perform services on our behalf (e.g., hosting, analytics, secure email, payment processing) under confidentiality agreements.
B. With Clients: If you submit a VDP report that affects a client’s system, we may share your report (including contact details if provided) with that client for remediation purposes.
C. For Legal Compliance: We may disclose personal information when required by law, subpoena, court order, or to protect our legal rights and the safety of others.
D. In Business Transactions: In connection with a merger, acquisition, restructuring, or sale of assets, where personal information is transferred as part of the transaction.
We implement industry-standard technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction, including:
Disclaimer: While we take all reasonable precautions, no security measure is infallible, and we cannot guarantee the absolute security of your information.
We retain personal information only for as long as necessary to:
Where possible, personal information is anonymized or securely deleted when no longer required.
If you access our services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.
By providing your information, you consent to such transfer.
Depending on your location, you may have the right to:
To exercise your rights, contact us at privacy@discloze.com. We may require verification of your identity before processing your request.
We use cookies and similar technologies to:
You may disable cookies in your browser settings; however, some site features may not function properly.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date. Significant changes will be communicated via email or platform notification where possible.
Discloze, Inc. is committed to maintaining the security and privacy of our clients, partners, and the public. We welcome responsible security research and vulnerability reporting that helps us strengthen our platforms and services. This policy outlines the rules for participating in our program and sets clear expectations for safe, legal, and respectful testing.
This policy applies to all Discloze-owned or operated domains, platforms, and services, unless specifically excluded in writing.
Testing of third-party systems, integrations, or services not owned by Discloze is strictly prohibited.
We expect all researchers to behave courteously and professionally when interacting with Discloze staff and systems. This includes:
Failure to meet these standards or engaging in hostile, unprofessional, or unauthorized activities may result in:
If you act in good faith, follow this policy, and limit testing to in-scope targets, we will consider your activity authorized under applicable laws (including the Computer Fraud and Abuse Act in the U.S.) and will not pursue legal action against you.
Send your report to vdp@discloze.com and include:
We will: