Vulnerability Disclosure Program

The Cuyahoga County Department of Information Technology awarded a contract to procure a Vulnerability Disclosure Program (VDP) solution. The selected solution is to be sourced from Bugcrowd and must include an embedded submission form, an email intake system, unlimited triage and validation, program set‑up, SDLC integration, and advanced reporting capabilities. This effort aims to strengthen the county’s cyber‑risk management by providing a structured channel for external security researchers to report vulnerabilities. • Scope includes software licensing, implementation, and ongoing triage services. • Required features: submission portal, email intake, unlimited validation, SDLC integration, advanced reporting. • Procurement type: informal RFB, likely a sole‑source award to Bugcrowd.