Request a Demo Contact Us
Join us at Black Hat Europe on December 4-7, 2023
Join Us

Why Every Company Should Have a Vulnerability Disclosure Program

Why Every Company Should Have a Vulnerability Disclosure Program


Too often we see security researchers, whitehat hackers, IT leaders, academics, and journalists reach out to organizations upon discovering a vulnerability; only to find that they don’t have an obvious channel to receive such report. And if they do have a security@ email, they are too overwhelmed by the flood of unorganized submissions to act on them.

With hundreds of vulnerabilities found daily, it’s critical to provide an obvious way for external parties to report vulnerabilities. Risk management, industry and legislative pressures are driving the need to have a vulnerability disclosure program (VDP) in place to demonstrate commitment to security, and to better manage and reduce cybersecurity risk.

Listen to Bugcrowd Founder and CTO Casey Ellis and CSO David Baker for a discussion on :

  • What is a vulnerability disclosure program
  • The impact VDP is having on the industry
  • Why implementing a VDP is no longer a nice-to-have, but a necessity

More resources

Hacker Resources

Platform Behavior Standards

Learn More

Expanding Risk Reduction with a Crowdsourced Security Platform

Read More

AI Safety and Compliance: Securing the New AI Attack Surface

Register Now

Get Started with Bugcrowd

Every minute that goes by, your unknown vulnerabilities leave you more exposed to cyber attacks.