Platform postWeb application
How disclosure works here
A write-up on datacoconut is tied to a real report, and the program's own disclosure policy decides when it can be published. Here is exactly what that means.
piPisenceAug 2026 · 2 min read
The policy is the rule
Every program publishes a disclosure policy. On most platforms that is prose nobody enforces. Here it is machinery.
The three policies
- Coordinated — you ask, the company answers. The request lands on their dashboard and their answer lands in your report thread.
- After fix — publication unlocks by itself once the stated number of days have passed since the report resolved. Nobody has to remember.
- No disclosure — findings stay confidential. You knew that before you started testing, because it is on the program page.
What is not gated
Articles, guides and methodology posts. Those are yours. The gate exists because a write-up carries somebody else's vulnerability in it. Nothing else does.
A finding is not a story until it is fixed.