...
For whatever reason you don't want an account, you may still report vulnerabilities – anonymously! However, if you want to participate in the coordination process, including discussions with vendors and researchers/reporters, then an account is required. VINCE was designed and created to encourage the interaction between vendors and reports. An potential benefit is that multi-vendor coordination efforts may be more cooperative – with vendors assisting other vendors with information on how to mitigate the vulnerability.
Getting an account
...
- 2FA required
- Recover/reset account
- Want to be anonymous? See FAQ, can report without creating account.
...