USAID Vulnerability Disclosure Policy Overview The U.S. Agency for International

The U.S. Agency for International Development (USAID) is committed to safeguarding our systems and sensitive information from unauthorized disclosure. This Vulnerability Disclosure Policy (VDP) is intended to provide security researchers clear guidelines for conducting vulnerability discovery activities and to explain the process for submitting discovered vulnerabilities to USAID. Vulnerability identification and remediation is critical to enhancing USAID cyber resilience and managing the risks associated with a global digital technology footprint. A strong partnership with the broader security researcher community can enable USAID to take immediate corrective action on potentially critical threat vectors.