Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What’s a Vulnerability Disclosure Program?

bugcrowd.com | vulnerability | #bug-bounty | #bugcrowd | #vdp | #vulnerability-disclosure | #policy | #nist | #ftc | #doj | #vulnerability-disclosure-program

Summary

Following FTC and DOJ guidance, VDP adoption is set to spread widely. Bugcrowd explains what a vulnerability disclosure program is, why it's complex, and what to consider when adopting one.
Published
Collected

original ↗

Related coverage

  1. Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs (bugcrowd.com)
  2. US House passes bill mandating vulnerability disclosure policies for federal contractors (yeswehack.com)
  3. Turnkey VDP Open Source: making a difference in enhancing cybersecurity as a “public good” (yeswehack.com)
  4. Vulnerability Disclosure Policy through the eyes of a bug hunter (yeswehack.com)
  5. Practical vulnerability disclosure: VDP made easy (yeswehack.com)
  6. A framework for successful vulnerability disclosure policy (yeswehack.com)

back