A clear, public process through which anyone can safely report vulnerabilities they find in your systems. We draft the document and, on request, run the entire reporting process for you.
A VDP (Vulnerability Disclosure Policy) is a public document that describes how security vulnerabilities found in your organisation’s systems can be reported, and how you handle them.
Anyone who finds a vulnerability on your website or in your services can easily report it by following the described process.
It gives ethical hackers a legal basis to alert you, in good faith, to the vulnerabilities they find.
It sets out clear rules and procedures, so reports are handled faster and more efficiently.
It supports the coordinated handling and sharing of vulnerabilities, working with CSIRTs where needed.
We don’t just draft the document: on request, we manage the entire process, so you don’t need separate resources to validate reports and communicate with reporters.
Cybersecurity requirements keep getting stricter: new laws, directives and updated standards increasingly include requirements for handling and disclosing vulnerabilities.
Vulnerability handling and disclosure are among the risk management measures required of essential and important entities. In Hungary, the directive is transposed by Act LXIX of 2024 on the Cybersecurity of Hungary.
The revised 2022 edition of the standard also places strong emphasis on managing technical vulnerabilities.
A VDP is the foundation of vulnerability management. If you’d like bugs to be actively hunted too, you can add a bug bounty program.
Tell us which systems it should cover, and we’ll propose the document and the reporting process.
Ethical hackers test your systems, and our consultants help you stay compliant.
© 2026 Hacktify International Kft.