Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

3 Reasons Why Every Company Should Have a Vulnerability Disclosure Program

bugcrowd.com | vulnerability | #bugcrowd | #vdp | #vulnerability-disclosure | #policy | #security-maturity | #process

Summary

Bugcrowd argues every company needs a Vulnerability Disclosure Program, noting only 9% of the Fortune 500 run one, and defines the three pillars every VDP needs: channel, policy and process.
Published
Collected

original ↗

Related coverage

  1. Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs (bugcrowd.com)
  2. Turnkey VDP Open Source: making a difference in enhancing cybersecurity as a “public good” (yeswehack.com)
  3. Vulnerability Disclosure Policy through the eyes of a bug hunter (yeswehack.com)
  4. Practical vulnerability disclosure: VDP made easy (yeswehack.com)
  5. A framework for successful vulnerability disclosure policy (yeswehack.com)
  6. Roles and responsibilities for efficient vulnerability disclosure (yeswehack.com)

back