"This expansion is a testament to transforming the government's approach to security and leapfrogging the current state of technology within DOD," he said.
Before the program’s launch, researchers had no way of reporting bugs they found in publicly accessible DoD systems.
“Because of this, many vulnerabilities went unreported," said Goldstein. "The DOD Vulnerability Policy launched in 2016 because we demonstrated the efficacy of working with the hacker community and even hiring hackers to find and fix vulnerabilities in systems."
Since the launch of the Vulnerability Disclosure Program, security researchers have submitted over 29,000 vulnerability reports. Officials said that over 70% of them were determined to be valid.