Bug Bounty, Vulnerability Rewards and Vulnerability Disclosure Programme

The MOD's computer networks and systems support the nation's defence and are crucial both for daily business operations and mission-critical activities.  Maintaining the security and integrity of The MOD's networks and systems is a matter of national security and requires the continuous identification and remediation of vulnerabilities that can be exploited by malicious cyber actors.  To reduce the cyber risk the MOD has been working with the ethical hacking community to find vulnerabilities in the MOD's systems. This is being done in the forms of a Vulnerability Rewards Programme (VRP), Bug Bounty challenges, an in-person bug bounty and a supply chain Vulnerability Disclosure Programme (VDP).