Five Takeaways from Ohio Secretary of State's VDP Success Story

**Executive summary:** This article summarizes the Ohio Secretary of State's Vulnerability Disclosure Program (VDP), describing how ethical hackers and continuous testing helped identify dozens of valid vulnerabilities, improve internal processes, build trust with constituents, and guide plans to expand into a bug bounty program; it is a high-level program overview rather than a technical incident report.