SSD Secure Disclosure
SSD Secure Disclosure is a private vulnerability acquisition and responsible disclosure broker operated by Beyond Security, connecting independent security researchers with enterprise software and hardware vendors through a managed intake, validation, and coordinated disclosure pipeline spanning operating systems, mobile platforms, and web browsers.
- Company typePrivate
- Founded2000
- HeadquartersSeoul, Jung-gu, South Korea
- Headcount1–10
- GTM typeB2B
- OfferingServices
What SSD Secure Disclosure does
SSD Secure Disclosure is a private vulnerability acquisition and responsible disclosure service that operates as an intermediary between independent security researchers and enterprise vendors. Researchers submit vulnerability discoveries through the company's online portal at ssd-disclosure.com, and SSD's technical team validates findings, signs contracts to protect researcher interests, and coordinates disclosure with the affected vendor. The platform pays researchers within a week of validation and publishes advisories with full credit (or anonymously at the researcher's option), with compensation calibrated to vulnerability severity and the prevalence of the affected software/hardware.
The company's underlying technology is a proprietary vulnerability intake, validation, and responsible disclosure pipeline rather than a packaged software product. The disclosure scope spans Windows, Linux, and MacOS operating systems; iOS, Android, and iOS baseband mobile platforms; and Chrome, Safari, and Firefox web browsers. SSD has published a substantial advisory archive covering major enterprise software and hardware targets including Cisco, vBulletin, the Linux kernel, Samsung, Motorola, and Unisoc chipsets. The program also operates TyphoonPWN hacking competitions as a sourcing channel and a referral program paying up to $10,000 USD per successful researcher referral to expand its community.
SSD's business model is community-led and service-based. Revenue is generated primarily through vulnerability acquisition and disclosure fees paid by enterprise vendors under contract, supplemented by an affiliate-style referral program for researchers. The company is operated as the primary vulnerability disclosure program of Beyond Security and serves two primary customer segments: enterprise software/hardware vendors needing a managed disclosure pipeline and independent security researchers seeking monetization, anonymity, and administrative handling of disclosures. The company is privately held with no disclosed institutional funding, no public revenue figures, and a small headcount in the 1-10 range.
SSD Secure Disclosure firmographics
Firmographics- Name
- SSD Secure Disclosure
- Legal name
- SSD Secure Disclosure
- Website
- https://ssd-disclosure.com
- Company type
- Private
- Founded year
- 2000
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- SSD Secure Disclosure is a private vulnerability acquisition and responsible disclosure broker operated by Beyond Security, connecting independent security researchers with enterprise software and hardware vendors through a managed intake, validation, and coordinated disclosure pipeline spanning operating systems, mobile platforms, and web browsers.
- Ownership category
- akta.pro rank
SSD Secure Disclosure industry classification
Industry- Product category
- Vulnerability Disclosure Services
- akta.pro primary industry
- Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)
Keywords
Where SSD Secure Disclosure is headquartered
LocationHeadquarters
- HQ city
- Seoul, Jung-gu
- HQ country
- South Korea
- HQ region
- Asia
Markets served
SSD Secure Disclosure business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales
Revenue model
- Vulnerability acquisition and disclosure fees: SSD acquires vulnerabilities from security researchers and receives compensation from vendor/clients for facilitating responsible disclosure and providing verified vulnerability intelligence. Vendors sign contracts with SSD before receiving any vulnerability information.
- Researcher referral fees: SSD runs a referral program rewarding researchers who refer other researchers to the platform — up to $10,000 USD per successful referral.
Go-to-market motion1 record
Distribution channels2 records
Marketing channels7 records
SSD Secure Disclosure product offering
Product offeringCore offering
SSD Secure Disclosure operates a vulnerability acquisition and responsible disclosure intermediary that purchases vulnerabilities from independent security researchers and sells coordinated vulnerability disclosure services to enterprise software and hardware vendors. Researchers submit vulnerabilities via the online portal, SSD validates and contracts for the findings, the vendor receives managed disclosure under contract, and SSD publishes advisories with full researcher credit. The company is operated in association with Beyond Security and focuses on operating systems, mobile platforms, and web browsers.
Product overview
SSD Secure Disclosure operates as a vulnerability disclosure and security research acquisition platform, functioning as an intermediary between independent security researchers who discover vulnerabilities and the vendors whose products are affected. The platform's core service is the SSD Secure Disclosure Vulnerability Disclosure Platform, which encompasses the full lifecycle of vulnerability handling: researchers submit brief vulnerability descriptions for review, sign detailed contracts focused on researcher protection, receive payout within a week of validation, and have their findings published with full credit. The company maintains a broad disclosure scope spanning operating systems (Windows, Linux, MacOS), mobile platforms (iOS, Android, iOS baseband), and web browsers (Chrome, Safari, Firefox). They also publish security advisories documenting vulnerabilities across software and hardware targets, maintaining an archive of vulnerability publications that includes research on enterprise software (Cisco, vBulletin, Linux kernel), mobile chipsets (Unisoc), and networking equipment.
Differentiator
Problem solved
Functional benefit
Products and services
- SSD Secure Disclosure Vulnerability Disclosure Platform A vulnerability research purchasing and responsible disclosure platform that connects independent security researchers with enterprise vendors, providing rapid submission processing, technical verification, contract signing, payout within a week, and coordinated public advisory publication. Scope covers Windows, Linux, MacOS, iOS, Android, iOS baseband, Chrome, Safari, and Firefox.
Companies that use SSD Secure Disclosure
Customer profileSegments2 records
Ideal customer profiles2 records
SSD Secure Disclosure technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
SSD Secure Disclosure partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Beyond SecuritycoreSSD Secure Disclosure (SecuriTeam Secure Disclosure) is operated by Beyond Security, a long-established cybersecurity company. Beyond Security runs the SSD program as its primary vulnerability acquisition and disclosure service. The company website references beyondsecurity.com and the SSD program as an integrated offering within the Beyond Security portfolio of security assessment services.
Scale indicators1 record
Recent moves5 records
Expansion highlights3 records
SSD Secure Disclosure competitors and assessment
Company assessmentDirect peers
- YesWeHack: YesWeHack runs a global bug bounty and vulnerability disclosure platform serving enterprise customers and independent researchers. It is comparable to SSD in offering managed disclosure workflows and researcher payouts.
- Cobalt: Cobalt is a Pentest-as-a-Service and bug bounty platform connecting organizations with security researchers for testing and disclosure. It is comparable to SSD in crowdsourced vulnerability discovery and managed researcher engagement.
- Intigriti: Intigriti is a European bug bounty and vulnerability disclosure platform with a researcher community and enterprise vendor programs. It competes with SSD for both researcher supply and enterprise vendor contracts across similar vulnerability categories.
- HackerOne: HackerOne is the largest bug bounty and vulnerability disclosure platform, directly competing with SSD by connecting independent researchers to enterprise vendors with paid programs. It overlaps with SSD on the core researcher-to-vendor vulnerability brokerage model.
- Bugcrowd: Bugcrowd operates a crowdsourced cybersecurity platform offering bug bounty, vulnerability disclosure, and pen-testing programs. It directly competes with SSD in facilitating vulnerability acquisition from researchers and managed disclosure to vendors.
- Open Bug Bounty: Open Bug Bounty is a free, non-profit vulnerability disclosure coordination platform connecting researchers with website owners. It is comparable to SSD in the vulnerability disclosure coordination function, though monetized differently.
Emerging players
- Detectify: Detectify is an attack-surface and vulnerability scanning platform that incorporates crowdsourced research from ethical hackers. It overlaps with SSD in leveraging external security research for vulnerability discovery, though delivered as SaaS scanning rather than disclosure brokerage.
- ProjectDiscovery: ProjectDiscovery is an open-source vulnerability detection and asset monitoring platform with a community of security researchers. It intersects with SSD in the vulnerability research and disclosure community, though focused more on detection tooling than paid disclosure brokerage.
Broad incumbents
- Zero Day Initiative (Trend Micro): ZDI is Trend Micro's long-running vulnerability research and disclosure program that purchases 0-day research from independent researchers. It is comparable to SSD in the vulnerability acquisition model but operates within a much larger incumbent security vendor portfolio.
Others
- Vulners: Vulners is a vulnerability intelligence database aggregating advisories and exploit data. It is thematically related to SSD as part of the vulnerability intelligence ecosystem, though Vulners is a data/search vendor rather than a disclosure broker.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
SSD Secure Disclosure social profiles
Digital presenceSSD Secure Disclosure financial estimates
Financial estimateRevenue estimate
Valuation estimate
SSD Secure Disclosure leadership team
Management profileNumber of profiles
SSD Secure Disclosure funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SSD Secure Disclosure M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SSD Secure Disclosure
What does SSD Secure Disclosure do?
SSD Secure Disclosure operates a vulnerability acquisition and responsible disclosure intermediary that purchases vulnerabilities from independent security researchers and sells coordinated vulnerability disclosure services to enterprise software and hardware vendors. Researchers submit vulnerabilities via the online portal, SSD validates and contracts for the findings, the vendor receives managed disclosure under contract, and SSD publishes advisories with full researcher credit. The company is operated in association with Beyond Security and focuses on operating systems, mobile platforms, and web browsers.
Is SSD Secure Disclosure a public or private company?
SSD Secure Disclosure is a private company. It is classified as corporate owned and is currently operating.
When was SSD Secure Disclosure founded?
SSD Secure Disclosure was founded in 2000. It employs 1 to 10 people.
Where is SSD Secure Disclosure based?
SSD Secure Disclosure is headquartered in Seoul, Jung-gu, South Korea, in the Asia region.
How does SSD Secure Disclosure make money?
Two revenue lines are on record. Vulnerability acquisition and disclosure fees are the primary driver. The others are researcher referral fees.
Who are SSD Secure Disclosure's main competitors?
Direct peers on record are YesWeHack, Cobalt, Intigriti, HackerOne, Bugcrowd and Open Bug Bounty. Emerging players are Detectify and ProjectDiscovery. Zero Day Initiative (Trend Micro) is listed as a broad incumbent. Vulners is listed as an others.
Does SSD Secure Disclosure have an API?
No public API is recorded for SSD Secure Disclosure.
What industry is SSD Secure Disclosure in?
SSD Secure Disclosure's product category is Vulnerability Disclosure Services. Its primary akta.pro industry code is FSAPAJAL, Bug Bounty, Vulnerability Disclosure & Security Services.