# Vulnerability disclosure with Casey Ellis

Page: https://stenobird.com/podcast/open-source-security-518991/vulnerability-disclosure-with-casey-ellis
Text version: https://stenobird.com/podcast/open-source-security-518991/vulnerability-disclosure-with-casey-ellis.md
Podcast: [Open Source Security](https://stenobird.com/podcast/open-source-security-518991)
Published: 2026-05-25T00:00:00+00:00
Episode link: https://opensourcesecuritypodcast.libsyn.com/vulnerability-disclosure-with-casey-ellis
Audio file: https://traffic.libsyn.com/secure/opensourcesecuritypodcast/2026-05-vulnerability-disclosure-casey-ellis.mp3?dest-id=542864
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/open-source-security-518991/episodes/vulnerability-disclosure-with-casey-ellis
Duration seconds: 2269

## Resource

Josh talks to Casey Ellis about why vulnerability disclosure is so hard, and also so important. Casey is one of the best in this space having been a Bugcrowd founder. There are few people with more experience and insight into how a security vulnerability should be handled, and why the explosion of AI is making all this much harder than it's ever been before. While finding vulnerabilities is easy, reporting them is still a lot of work. Casey is working on helping everyone better understand all this with his disclose.io project. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-05-vulnerability-disclosure-casey-ellis/

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/open-source-security-518991/episodes/vulnerability-disclosure-with-casey-ellis/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/open-source-security-518991/vulnerability-disclosure-with-casey-ellis.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.