---
id: 3740
title: "Vulnerability Disclosure Policy"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/vulnerability-disclosure-policy/"
published_at: "2025-05-14 01:29"
tags: ["vulnerability-disclosure", "policy", "coordinated-disclosure", "cna", "project-black"]
phying_url: "https://phying.com/item/3740"
lang: en
---

# Vulnerability Disclosure Policy

## Summary

Project Black's disclosure policy: vendors get up to 14 days of contact attempts and 90 days to remediate, with earlier public disclosure if a fix ships or active exploitation is observed.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-05-14 01:29
- **Original:** https://projectblack.io/blog/vulnerability-disclosure-policy/
- **Phying News:** https://phying.com/item/3740