Google has introduced a series of initiatives aimed at improving the vulnerability management ecosystem. These include forming a Hacking Policy Council with industry partners, committing to publicly disclose incidents of active exploitation, and establishing a Security Research Legal Defense Fund to support good-faith researchers in reporting vulnerabilities.

Google emphasizes the need to address the root causes of vulnerabilities by prioritizing secure software development practices. This includes focusing on good patch hygiene, timely patch adoption for known vulnerabilities, and applying secure-by-design principles throughout the software development lifecycle.

Google has launched a free API service called deps.dev API, which provides access to security metadata and dependency information for over 50 million versions of five million open source packages. Additionally, its cloud division has made the Assured Open Source Software service generally available for Java and Python ecosystems.