VDP

About

With attack surfaces continuing to grow, organisations should help good-faith researchers notify them of any potential vulnerabilities they find in their digital assets. It’s up to IT teams to provide a secure, straightforward mechanism to facilitate this process.

YesWeHack provides a simple, secure, technical and legal framework for reporting potential vulnerabilities in your internet-facing assets – after which you can quickly take the appropriate action.

A Vulnerability Disclosure Policy, or VDP, is advocated by regulatory agencies such as NIST, ENISA and CISA and prescribed through standards ISO 29147 and ISO 30111.

This product is intended for

• Security Professional
• Chief Information Security Officer
• Chief Security Officer
• Chief Technology Officer
• Head of Security
• Head of Cyber Security
• Director of Cyber Security