United States Department of Agriculture: Vulnerability Disclosure Program

  • Safe harbor
  • No collaboration

We no longer offer point rewards for submissions on this program. Please refer to our blog post: How Bugcrowd sees VDPs and points for more details.

Program stats

  • Vulnerabilities accepted 322
  • Validation within 9 days 75% of submissions are accepted or rejected within 9 days

Recently joined this program


USDA is committed to ensuring the security of the American public by protecting their information. This policy is intended to give security researchers clear guidelines for conducting vulnerability discovery activities and to convey our procedures on submitting reports on discovered vulnerabilities.

This policy describes what websites and types of research are covered under this policy, how to submit vulnerability reports, and how long we ask security researchers to wait before publicly disclosing vulnerabilities.


Program rules

This program follows Bugcrowd’s standard disclosure terms.

For any testing issues (such as broken credentials, inaccessible application, or Bugcrowd Ninja email problems), please submit through the Bugcrowd Support Portal. We will address your issue as soon as possible.