Observed arrival · 2026-10-21
Buona Fede: a legal proposal for good-faith security research
An Italian collective initiative is drafting protections for people who find and report security vulnerabilities, with conditions set out in a public manifesto.
- For
- Italian vulnerability researchers and security professionals
- Worth noticing
- The proposed protection requires, among other conditions, prompt reporting and no data copying beyond what is strictly necessary.
Field notes
The manifesto sets out cumulative conditions rather than a blanket permission to test systems: it excludes fraudulent or profit-seeking intent, requires proportionate actions and prompt reporting, and restricts copying or public disclosure. It also says the initiative is not seeking to replace authorized testing, bug bounties, or penetration-test contracts. The comparative materials discuss four European countries, while noting that some source points still need verification.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue