Opt-in disclosure is a security reporting model in which project maintainers choose to receive direct vulnerability findings. Instead of sending every report to every project, the sender only delivers results to participants who have agreed to that workflow. This is useful when findings are generated automatically, because it gives maintainers control over volume, format, and timing.
In cyber security, opt-in disclosure matters because it reduces unwanted noise while speeding up delivery of potentially useful issues. It is common in coordinated disclosure and bug bounty-style programs, where teams want early warning but also need to manage triage workload. The downside is that the receiver must still validate each report, especially if it comes from an AI system or other automated scanner. Defenders use opt-in channels to improve intake; attackers may try to overwhelm or spoof disclosure paths, so access control and report verification remain important.