Robust cybersecurity programs now require interaction with hackers, government agencies, competitors and information-sharing organizations to collect, disclose and collaborate on threats and vulnerabilities affecting proprietary, commercial and open source technology. Although these interactions are necessary, they present legal and contractual risks for everyone involved.