Organizations need a mechanism for identifying and remediating vulnerabilities discovered outside the typical software development lifecycle. Vulnerability Disclosure Programs provide a means to align these considerations efficiently and economically, while building a stronger security brand.