---
id: 141
title: "3 myths about VDPs for state and local governments"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/3-myths-about-vdps-for-state-and-local-governments/"
published_at: "2026-06-16 12:00"
tags: ["bug-bounty", "vulnerability-management", "cisa", "bugcrowd", "vdp", "vulnerability-disclosure", "government", "policy", "public-sector"]
phying_url: "https://phying.com/item/141"
lang: en
---

# 3 myths about VDPs for state and local governments

## Summary

Bugcrowd debunks three myths holding state and local agencies back from VDPs, citing its 2026 hacker report (85% prioritize reporting over money) and California's statewide VDP that fixed 400+ vulnerabilities.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2026-06-16 12:00
- **Original:** https://www.bugcrowd.com/blog/3-myths-about-vdps-for-state-and-local-governments/
- **Phying News:** https://phying.com/item/141