Skip to content

Background

Prerequisites

These pages assume that you have:

  • an interest in learning about the Vultron Protocol
  • familiarity with the Coordinated Vulnerability Disclosure (CVD) process in general

If you are already familiar with the Vultron Protocol and want to implement it, start on Implement the Protocol. If you're trying to understand the CVD process, we recommend that you start with the CERT Guide to Coordinated Vulnerability Disclosure.

New to Vultron?

If you want a concise overview of what Vultron is, why it exists, and whether it is relevant to your organization, start with What Is Vultron?.

These pages explain the problem Vultron addresses and the goals it is designed toward. Each one builds on the ones before it.

  • What Is Vultron? — What kind of thing Vultron is: an open protocol that lets the systems organizations already use for vulnerability disclosure coordinate a case with each other, the way email servers exchange mail.
  • CVD as a Coordination Problem — Why Vultron treats every Coordinated Vulnerability Disclosure case as a multi-party coordination problem, and where the protocol sits among the CERT/CC's other work on the CVD process.
  • Interoperability — Why organizations coordinating a vulnerability case need shared meaning, not only a shared message format, and what this documentation gives you toward it.
  • Defining CVD Success — The outcomes a Coordinated Vulnerability Disclosure case is trying to reach, stated as twelve ordering preferences over six case events, and how a Coordinator acts on them during a case.