In this article I apply Fineman’s vulnerability thesis to explore the ways in which vulnerability is constructed and mobilised in a criminal law context. Using a ‘failure-to-protect’ offence as a case study reveals contemporary constructs of vulnerability as both a problem to be solved and gendered. Constructing women as pathologically vulnerable allows the state and its institutions to downplay the situational vulnerability of women, evading responsibility for tackling VAWG. Responsibilising women to manage risks to children posed by male violence requires that women undertake ‘safety work’, rendering them vulnerable to both moral and legal sanction if not performed adequately. Replacing the autonomous subject with the relationally vulnerable subject generates new understandings of the ways entwining femininity and vulnerability shores up the (male-coded) autonomous legal subject. Moreover, reconceiving vulnerability as universal reveals the potential of the vulnerable subject for a more inclusive criminal subject who is both embedded and embodied.