3 Principles for Modern VDPs: How AWS Scales Disclosure

This article describes AWS's approach to scaling a vulnerability disclosure program, emphasizing automated intake and AI-assisted enrichment, optimizing "time-to-context" so validated findings reach engineers with actionable detail, and eliminating classes of vulnerabilities to achieve systemic risk reduction; it references HackerOne survey data and the 2025 Hacker-Powered Security Report to contextualize trends.