WiCyS

WiCyS Vulnerability Disclosure Program (VDP)

The WiCyS Vulnerability Disclosure Program (VDP) is designed to provide WiCyS members with hands-on, technical training in identifying, reporting, and remediating cybersecurity vulnerabilities. Utilizing the WiCyS website and platform as a live training environment, participants gain real-world experience in vulnerability discovery, triage, and reporting—key skills that enhance their résumés and prepare them for careers in cybersecurity. The program empowers members to become “Defenders of WiCyS” by fostering a deeper understanding of secure coding practices, systems analysis and responsible disclosure processes.

Through strategic partnerships with leading organizations in the security space, such as HackerOne, the program aims to evolve into a full-fledged bug bounty initiative with recognition. Participants are encouraged to collaborate, share insights, and build their technical acumen in a supportive community environment. The VDP is open to all WiCyS members and serves as a stepping stone toward more advanced training and industry engagement.

Available to:

• WiCyS members of all experience levels (domestic or international)
• Professionals seeking hands-on experience
• Individuals interested in vulnerability discovery and reporting
• Members looking to strengthen offensive and defensive security skills

What You Get:

• Access to a live, real-world training environment using the WiCyS platform
• Opportunities to discover, report, and triage actual vulnerabilities
• Recognition for validated contributions
• Exposure to responsible disclosure processes and secure coding principles
• Opportunities to collaborate with other WiCyS members in a supportive cybersecurity learning community
• Potential future involvement in a formal bug bounty program through industry partnerships

Important to know:

• This is a training-focused program, not currently a paid bug bounty—but it offers a strong foundation for participating in those environments.
• All submissions are subject to review and validation by program administrators.
• Participants must follow responsible disclosure practices and adhere to program guidelines.
• It is strongly recommended that participants watch the launch webinar before beginning their program activities.
• All participants are required to act within the guidelines established by the WiCyS Code of Conduct and the WiCyS VDP policy.

Timeline:

May 5, 2025 – May 1, 2026: Applications open continuously—members can apply at any time

May 23, 2025: Initial welcome emails and digital badges sent to early applicants

Starting May 24, 2025: New applicants will be accepted and onboarded on a weekly basis

May 27, 2025 at 1 PM CT: Launch Webinar facilitated

June 2, 2025 – June 1, 2026: Program runs