---
id: 2190
title: "[Guest Post] Instructure’s Proven Security Vulnerability Disclosure Program"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/instructure_security_vulnerability_disclosure_program/"
published_at: "2019-08-13T00:00:00Z"
tags: ["bug-bounty", "def-con", "education", "bugcrowd", "case-study", "vdp", "vulnerability-disclosure", "guest-post", "instructure", "education-security", "vulnerability-disclosure-program"]
phying_url: "https://phying.com/item/2190"
lang: en
---

# [Guest Post] Instructure’s Proven Security Vulnerability Disclosure Program

## Summary

Instructure's security VP describes its Bugcrowd-hosted VDP, prompted by a DEF CON talk on hard-to-report school software flaws, and invited the young researcher behind it to its private bounty.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2019-08-13T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/instructure_security_vulnerability_disclosure_program/
- **Phying News:** https://phying.com/item/2190