Finding the Bug Was Easy. Finding Who to Tell Is the Real Nightmare.
Security researchers spend more time hunting for a disclosure email than finding the bug itself. Disclosure Lookup, a new Caido plugin from disclose.io, surfaces the right contact channel in seconds — but its real value is exposing how broken the vulnerability reporting ecosystem truly is. The hardest part of responsible disclosure isn’t the disclosure. It’s finding someone responsible to disclose to.