Hack DHS: crowdsourced vulnerability assessment services
Active Indefinite Delivery Contract Awarded Last action
- Contract number
- 70RTAC22D00000001
- Awardee
-
Bugcrowd Inc. UEI DRCHBQ1G4D38
- Awarding agency
-
Office of Procurement Operations
Department of Homeland Security
- Task orders
- 4 $466,929 obligated
Award facts
- Opportunity
-
- Hack DHS: Crowdsourced Vulnerability Assessment Services (CVAS) Pre-Solicitation · 70RTAC22R00000027 · Posted Mar 3, 2022
- Combined order value
-
- $466,929 Current, with exercised options
- $492,929 Potential, with all options
- Last date to order 81% complete
- IDV ceiling 1% used
- $43,161,835.96
- Award type
- Single award
- Who can order
- Only the awarding agency
- Contracting staff
- Funding agency
- Office of the Chief Information Officer Department of Homeland Security
- NAICS code
- 541519 Other Computer Related Services
- Set-aside
- No set-aside
- Competition
- Full and Open Competition · 8 offers Negotiated Proposal / Quote
- Pricing
- Firm Fixed Price
- Legislative mandates
-
- Service Contract Inventory FAR subpart 4.17
Award details come from SAM.gov/FPDS.
About this IDV
The Department of Homeland Security Office of the Chief Information Officer awarded a single-award Indefinite Delivery Contract to Bugcrowd Inc. for crowdsourced vulnerability assessment services with a ceiling of $43,161,835.96, effective September 29, 2022, through September 28, 2027. No set-aside designation applies.
Work is performed primarily at Bugcrowd's facilities with occasional on-site interactions in the Washington, D.C. area. The contract enables DHS to issue delivery orders for vulnerability discovery assessments, validation and triage, remediation coordination, and detailed reporting across various DHS systems and applications.
The originating Hack DHS solicitation sought an ordering vehicle to conduct pre-assessment research and recruitment of security researchers, live vulnerability discovery assessments against public-facing and internal DHS systems, and post-assessment reporting. Vendors were required to provide an existing security researcher community and platform supporting workflow management APIs and full packet capture monitoring. NAICS codes 541511 and 541512 apply. The base period runs one year with four optional one-year extensions.
Recent delivery orders issued under this IDIQ include an $92,625 task order for crowdsourced vulnerability assessment services for the Digital Provenance Project, awarded December 4, 2024, through June 3, 2025; an $92,625 delivery order for AskCISA vulnerability assessment, awarded August 12, 2024, through December 11, 2024; and a $192,037.50 order for vulnerability assessment of EMPOWHR, GOVTA, and WEBTA applications, awarded February 12, 2024, through May 31, 2024. An earlier $115,641 delivery order for the Federal Law Enforcement Training Center's Student Administration and Scheduling System was completed September 27, 2023.
Task orders
Transactions
| Action | Obligated | Date |
|---|---|---|
| Exercise an Option | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | -$2,500 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Original award | $2,500 |
Quick answers
Who was awarded contract 70RTAC22D00000001?
70RTAC22D00000001 was awarded to Bugcrowd Inc. by Office of Procurement Operations (Department of Homeland Security) on September 29, 2022.
How much is contract 70RTAC22D00000001 worth?
Orders under 70RTAC22D00000001 have obligated $466,929. Their combined potential value, with all options, is $492,929. 70RTAC22D00000001's own ceiling is $43,161,836.
How many orders have been placed under contract 70RTAC22D00000001?
4 orders have been placed under 70RTAC22D00000001, the latest on December 4, 2024.
Which agency awarded contract 70RTAC22D00000001?
Office of Procurement Operations (Department of Homeland Security) awarded 70RTAC22D00000001, with funding from Office of the Chief Information Officer (Department of Homeland Security).
Who can order from contract 70RTAC22D00000001?
70RTAC22D00000001 is a single award indefinite delivery contract. Only the awarding agency can place orders on it.
Was contract 70RTAC22D00000001 competed?
The extent of competition for 70RTAC22D00000001 was full and open competition. The government received 8 offers.
On GovTribe
See this IDV's full record
- Every order and transaction
- The awardee's other awards and teaming partners
- Similar IDVs and recompete opportunities
- Ask GovTribe AI about this IDV