[ 01 ] — Industry — Government
Public services, tested by the public — safely.
Agencies run disclosure programs and bounties that meet federal and national requirements while inviting good-faith help.
Do government agencies need a vulnerability disclosure program?
In the US, federal agencies are required to publish a vulnerability disclosure policy under CISA Binding Operational Directive 20-01, and many other governments encourage the same. A managed VDP meets that need without building an intake team.
[ 02 ] — Capabilities
VDP mandates
Supports BOD 20-01 and equivalents.
Cleared researchers
Citizenship and clearance filters.
Data residency
Sovereign hosting options.
Procurement ready
Available through major frameworks.
[ 04 ] — Questions people ask
Is AI used on government programs?+
Where agreed, AutoVAPT AI tests public services autonomously under the program's data-handling controls; analysts confirm every finding.
[ ∞ ] — Next step