Vulnerability Disclosure is Now Mandatory for Federal Agencies - Here's How to Make it Happen

This document explains CISA's Binding Operational Directive 20-01, which mandates federal agencies publish vulnerability disclosure policies (VDPs) and meet specific timelines and handling requirements; it provides five practical steps for compliance and promotes HackerOne's tools and services to help agencies implement and manage VDP programs.