Gold Eagle: Advancing AI-Driven Vulnerability Reporting
On June 2, 2026, President Trump signed Executive Order 14409, launching a bold effort to improve AI cybersecurity. As a result, Treasury and CISA have implemented Gold Eagle, an innovative software solution that empowers organizations to find, validate, and fix vulnerabilities.
Gold Eagle works with the existing Vulnerability Information and Coordination Environment (VINCE) platform to support coordinated vulnerability disclosure (CVD), making it easier than ever for experts to share critical information and dramatically reduce cyber risks.
Working with government and industry partners, CISA and Treasury have created a clearinghouse—or centralized platform—to strengthen cybersecurity, improve vulnerability management, and add new features to Gold Eagle. The clearinghouse makes it easier to report and fix vulnerabilities and supports collaboration across the community.
How Gold Eagle Works
Gold Eagle lets organizations report, validate, and track AI-related vulnerabilities at scale. It ensures CISA can quickly review and process reports and avoid duplicate efforts while helping researchers and vendors identify and fix vulnerabilities safely.
Who is Gold Eagle For?
Organizations from every industry and sector using AI to identify vulnerabilities on a large scale are encouraged to join Gold Eagle. If your organization is committed to working together with government and private partners to improve cybersecurity, your participation is welcomed and encouraged.
How to Get Involved and Report Vulnerabilities
CISA continues to recommend that organizations automate prioritization wherever possible to meet the breadth and scale of AI-enabled vulnerability reporting. Gold Eagle will be used for such reporting.
Industry partners interested in collaborating, innovating, and making a real impact are encouraged to reach out—email clearinghouse@cisa.dhs.gov to get started.
If you have:
- a traditional vulnerability disclosure, submit it to VINCE.
- a cyber incident to report, contact CISA.
- information about malicious AI use, share it with the Joint Cyber Defense Collaborative.
Join the movement and be part of the future of AI security!
