Security Vulnerability Assessment (SVA) | Homeland Security
U.S. flag

An official website of the United States government

  1. Home
  2. About DHS
  3. Site Links
  4. Keywords
  5. Security Vulnerability Assessment (SVA)

Security Vulnerability Assessment (SVA)

Last Updated: | Site Page

Report an IT Vulnerability

DHS recognizes that security researchers regularly contribute to the work of securing organizations and the Internet as a whole. Therefore, DHS invites reports of any vulnerabilities discovered on internet-accessible DHS information systems, applications, and websites.

Last Updated: | Publication

Vulnerability Disclosure Program Policy and Rules of Engagement

In accordance with Section 101 and Title I of the SECURE Technology Act (P.L. 115-390), this policy provides security researchers with clear guidelines for (1) conducting vulnerability and attack vector discovery activities directed at Department of Homeland Security (DHS) systems and (2) submitting those discovered vulnerabilities. This policy has been developed in consultation with the Attorney General, the Secretary of Defense, the Administrator of GSA, and non-governmental security researchers.