CISA: Thousands of bugs remediated in second year of vulnerability disclosure program

CISA’s second annual report on its Vulnerability Disclosure Policy (VDP) Platform details 2023 performance: 7,058 submissions triaged across 51 federal agencies, yielding 1,094 valid disclosures, 872 remediations, and 250 critical findings, amid 11 new agency onboardings. The report highlights cost and time efficiencies—participants saved an estimated $4.45M in remediation costs on average and validated submissions two days faster—while providing broader visibility into vulnerability trends across federal civilian agencies.