Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Tacit is a vulnerability disclosure program on its own site. It does not pay bounties. As of Oct 19, 2026. Markdown for agents

NR Unrated

Tacit

Tacit Independent ยท self-hosted
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Tacit? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review