---
id: 3070
title: "Why Every Federal Agency Needs a VDP"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/why-every-federal-agency-needs-vdp"
published_at: "2020-01-14T22:00:00Z"
tags: ["bug-bounty", "cisa", "vdp", "vulnerability-disclosure", "dod", "hacker-powered-security", "federal-agency"]
phying_url: "https://phying.com/item/3070"
lang: en
---

# Why Every Federal Agency Needs a VDP

## Summary

A CISA draft directive requires all US federal civilian agencies to publish a vulnerability disclosure policy, following the DoD VDP model that surfaced 12,000+ vulnerabilities in three years.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2020-01-14T22:00:00Z
- **Original:** https://www.hackerone.com/blog/why-every-federal-agency-needs-vdp
- **Phying News:** https://phying.com/item/3070