US Federal

Your Best Ally for VDP and Beyond

The U.S. Department of Defense has resolved more than 25,000 valid vulnerabilities through the HackerOne Attack Resistance Platform.

If you're not seeing that kind of success at your agency, it's time to look at new options for your CISA BOD-mandated VDP and more.

Speak with a security expert
Security
HackerOne Partners

Federal contract vehicles and partners

  • NASA SEWP VDoD FA2 CVDD ( IDIQ)
  • GS-35F-0511T
  • Hack DHS: CVAS
  • Secure Soft Technologies
  • Carahsoft
  • AWS Marketplace
zerotrust
Zero Trust Mandate

We support your zero trust strategy

Learn how human security testing helps the U.S. government’s zero trust mandate.

Read blog post

Questions about VDP?

Consult our security experts.

According to the CISA binding operational directive 20-01, federal agencies must implement a VDP. The directive has many federal agencies asking questions such as:

  • How do we set up a system for quickly triaging vulnerabilities that both satisfies compliance requirements and doesn’t overwhelm our team?
  • How do we manage inbound vulnerability reports and communicate with external researchers safely and efficiently?
  • How do we satisfy all CISA requirements before the deadline without compromising our holistic security posture?

Our security experts are here to consult you on the best course of action for your agency.