---
id: 2769
title: "Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/understanding-public-and-private-bug-bounties-and-vulnerability-disclosure-programs"
published_at: "2022-05-18T16:00:00Z"
tags: ["bug-bounty", "vdp", "vulnerability-disclosure", "best-practices", "hackerone", "program-design"]
phying_url: "https://phying.com/item/2769"
lang: en
---

# Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs

## Summary

Bug bounties and VDPs both collect vulnerability reports from third parties but differ in rewards and structure. The primer explains when to choose public or private listings for each program type.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-05-18T16:00:00Z
- **Original:** https://www.hackerone.com/blog/understanding-public-and-private-bug-bounties-and-vulnerability-disclosure-programs
- **Phying News:** https://phying.com/item/2769