USDA is committed to ensuring the security of the American public by protecting their information. This policy is intended to give security researchers clear guidelines for conducting vulnerability discovery activities and to convey our procedures on submitting reports on discovered vulnerabilities.
This policy describes what websites and types of research are covered under this policy, how to submit vulnerability reports, and how long we ask security researchers to wait before publicly disclosing vulnerabilities.
This program follows Bugcrowd’s standard disclosure terms.
For any testing issues (such as broken credentials, inaccessible application, or Bugcrowd Ninja email problems), please email firstname.lastname@example.org. We will address your issue as soon as possible.