Computer Security Incident Response Team
We find vulnerabilities in systems you own, and tell you before someone else finds them.
CSIRT.global is a volunteer-led, not-for-profit foundation registered in the Netherlands. We scan for known vulnerabilities and exposed credentials, then contact the owners. We never ask for payment, credentials or access.
Check us
Everything here is independently verifiable
If we contacted you unexpectedly, you should be sceptical. These are the details you can check against public registers, without taking our word for anything.
What we do
Three kinds of work
Bug bounties
Fully funded bug bounty programs for charities and NGOs, from first scan to remediation.
Read more →Exploit research
Finding previously unknown vulnerabilities in public infrastructure, and training the researchers who do it.
Read more →Incident response
Identifying vulnerable systems at scale, contacting their owners, and assisting organisations that have been compromised.
Read more →Why
Our mission
We build a global community, bound by a passion for solving security problems such as vulnerabilities. We find owners and disclose to prevent incidents, making the world more secure. We love the internet and aim to understand its weaknesses. We love personal growth, and help our community to grow as individuals and as a group. We are non-partisan, a-political, inclusive and open. We maintain a sense of realism, we’re protective of sensitive data and understand its impact.