---
id: 3768
title: "Why You Need a Vulnerability Disclosure Program (VDP)"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/a-tale-of-2-vulnerability-disclosures/"
published_at: "2023-09-18T00:36:28Z"
tags: ["cloud", "vdp", "vulnerability-disclosure", "responsible-disclosure", "security-txt", "cloud-storage", "s3-buckets"]
phying_url: "https://phying.com/item/3768"
lang: en
---

# Why You Need a Vulnerability Disclosure Program (VDP)

## Summary

Contrasting disclosures of exposed cloud storage buckets: one company handled it perfectly; the other rebuffed the researcher and left data public — a case for a vulnerability disclosure program.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2023-09-18T00:36:28Z
- **Original:** https://projectblack.io/blog/a-tale-of-2-vulnerability-disclosures/
- **Phying News:** https://phying.com/item/3768