PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing VDP Compliance—A Free Offering From Bugcrowd

bugcrowd.com | blog | #compliance | #bugcrowd | #crowdsourced-security | #vdp | #vulnerability-disclosure | #product-launch
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd launches VDP Compliance, a free service providing a guided vulnerability disclosure policy and public reporting portal for organizations that self-manage triage and must meet requirements.
Published
Collected

Related coverage

blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Introducing Savant Vista: Know what you own. Know what’s at risk.
Bugcrowd's Savant Vista enters public beta: attack surface intelligence pairing continuous discovery and scanning with human-led offensive validation, so teams prioritize what is truly exploitable.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy as a first step of GfK’s crowdsourced security strategy
GfK's security team explains why it started with a Vulnerability Disclosure Policy before Bug Bounty, using the VDP as a low-risk first step to build a business case and earn internal trust.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
Back