Non-profit organization. Our mission is to defend the free & open Internet by trying to make it safer. We address security issues via Responsible Disclosure.

The Hague, The Netherlands
Joined July 2012
We're thrilled to announce a merger with @csirt_global to support a global community of security experts willing to contribute to protecting the free and open internet by making it safer.
4
Tea Pot – at City of London, London
It is better to be the hammer than the anvil.
Good, better, best. Never let it rest. Until your good is better and your better is best. Being judged for not being good enough for a blue @verfied checkmark is more than just a test.
1
3
There's nothing like volunteers who believe in a mission and a cause. This is why we are looking for volunteers who are willing to open a chapter in their country as there is strength in numbers but organizing those numbers is one of the great challenges.
2
4
6
One thousand three hundred new people signed up for volunteering at GDI.foundation in the last ten days.
1
7
We are having some problems with our website, and we are looking into this.
1
A documentary maker wants to interview the volunteers. It's a unique opportunity for those who like to come forward (anonymously) and shares their stories. We want to ask everyone who has contributed and helped in the last five years to contact us for this special occasion.
2
1
1
4
Dear -j It's time to come back out of retirement because we could use a bit of help.
1
2
GDI.Foundation retweeted
Shodan now has more than 4 million users! To celebrate we are offering the membership at a discounted price of $4 for the next 24 hours: shodan.io/store/member
109
926
215
1,751
In the last four years, the volunteers of the GDI.foundation have been working hard to make the internet safer by identifying and reporting over MILLION security issues and data leaks. We will publish our annual report soon with a big thanks to all our supporters.
GDI.Foundation retweeted
Replying to @JackRhysider
You can report these issues directly. If you are worried about legal consequences, then there multiple safe channels like bug bounty programs and organizations like @GDI_FDN and @DIVDnl that can help you to make a responsible disclosure/coordinated vulnerability disclosure safely
1
4
Suppose that your organization did not apply the security advisory recommended actions to mitigate the TMUI RCE vulnerability CVE-2020-5902 before Friday, 3 July 2020. Then you can consider your F5 BIG-IP device as potentially compromised. support.f5.com/csp/article/K…
We’ve received requests in the past to show how we do our investigations concerning findinding examining dataleaks on a global scale. Victor will show every step of the investigation and reporting process for a live stream audience. Do you would like to comment or participate? ↓
I want to know your opinion. Here is a quick poll to see who is interested if I do a once-in-a-lifetime live stream session
48%Finding dataleaks
40%Finding vulnerabilities
10%Unscripted: AMA/challenge
3%Other: Please reply
192 votes • Final results
1
2
GDI.Foundation retweeted
There is a high probability that Citrix ADC servers with no mitigation applied on or after January 9, 2020, have been taken over and their TLS certificates and associated keys have been stolen. [2/2] Please patch AND revoke your certificates.
2
5
2
7