Public beta now open

Never lose a vulnerability
report again

The dead-simple drop-in replacement for security@domain.com. A proper dashboard, structured reports, severity ratings, and real-time status tracking. All in one link.

Get Started See how it works

dashboard — zeroday.report

>0 new vulnerability reports

criticalSSRF in image proxy endpoint2h ago

lowInformation disclosure in error pages1h ago

mediumOpen redirect on OAuth callback14m ago

highXSS via profile bio field2m ago

criticalSQL Injection in /api/users endpointjust now

$ Waiting for your response...

Features

Everything security@domain.com isn't

A purpose-built platform for receiving, tracking, and managing vulnerability reports. No more lost emails, no more spreadsheets.

One link, infinite reports

Create a project, get a unique reporting URL. Share it in your README, security.txt, or anywhere. That's it.

Real-time dashboard

See every report as it comes in. Severity ratings, statuses, response tracking — no more digging through email threads.

Filter, search, triage

Sort by severity, status, reporter, or date. Full-text search across all reports. Find anything in seconds.

Structured severity ratings

Every report gets a proper CVSS-style severity rating. Critical, high, medium, low — at a glance.

Never miss a report

Instant notifications when new reports come in. Track which ones need your response. Zero reports lost.

GitHub-native auth

Reporters can sign up with GitHub or email. You know exactly who's reporting. Block bad actors instantly.

How it works

Three steps. That's it.

No complex setup. No procurement process. No sales calls. Just create, share, and start receiving properly structured vulnerability reports.

Create a project

Link a GitHub repo or name a project. Takes 30 seconds. We generate a unique reporting URL for you.

https://zeroday.report/r/your-project

Share your link

Drop it in your security.txt, README, or wherever you currently point people to security@. Done.

# security.txt
Contact: https://zeroday.report/r/your-project

Receive & manage reports

Reports come in structured with severity, details, and reproduction steps. Triage, respond, and resolve — all from one dashboard.

$ 3 new reports → 1 critical, 1 high, 1 medium

Comparison

You already know email sucks for this

We're not competing with HackerOne. We're replacing the inbox you're already ignoring.

zeroday.reportsecurity@

Structured reports with severity

Dashboard & search

Status tracking

Reporter authentication

Block bad actors

Response time tracking

Setup time

30 seconds

Already done

Cost

Free to start

Free but painful

Pricing

Choose your operational level

Scale from individual vulnerability intake to enterprise-grade incident response. No hidden fees.

Free

Solo devs / OSS maintainers

£0forever

Essential vulnerability intake for individual developers.

Projects

Seats

Email notifications
Basic dashboard
GitHub auth

Get Started

Plus

Small teams / startups

£49.99/mo

Full team collaboration with reporter communication.

Projects

Seats

Everything in Free
Live chat with reporters
Internal report notes

Get Started

Pro

Agencies / growing SaaS

£149.99/mo

AI-powered incident response for critical vulnerabilities.

∞

Projects

Seats

Everything in Plus
AI phone calls on Critical reports
Auto-call if no reply in 1 hour

Get Started

Compare plans

Features	Free	Plus	Pro
Email notifications
Basic dashboard
GitHub authentication
Live chat with reporters
Internal report notes
AI phone calls (Critical reports)

Stop losing vulnerability reports
in your inbox

Get started with ZeroDay.report and replace security@domain.com with something that actually works.

Get Started

Free for open source. Always. Just ask.

Never lose a vulnerabilityreport again

Everything security@domain.com isn't

One link, infinite reports

Real-time dashboard

Filter, search, triage

Structured severity ratings

Never miss a report

GitHub-native auth

Three steps. That's it.

Create a project

Share your link

Receive & manage reports

You already know email sucks for this

Choose your operational level

Free

Plus

Pro

Compare plans

Stop losing vulnerability reportsin your inbox

Everything security@domain.com isn't

One link, infinite reports

Real-time dashboard

Filter, search, triage

Structured severity ratings

Never miss a report

GitHub-native auth

Three steps. That's it.

Create a project

Share your link

Receive & manage reports

You already know email sucks for this

Choose your operational level

Free

Plus

Pro

Compare plans

Stop losing vulnerability reportsin your inbox

Never lose a vulnerability
report again

Stop losing vulnerability reports
in your inbox

Stop losing vulnerability reports
in your inbox