Federal contractors soon might have to adopt policies that allow ethical hackers to find and report cybersecurity vulnerabilities in their systems.

Vulnerability disclosure policies have been a requirement for federal agencies, along with smartphone, laptop and other device manufacturers and suppliers, since 2020.