Indefinite Delivery Contract 70RTAC22D00000001

Award Date 9/29/22
Last Date to Order 9/28/25
Contracting Federal Agency
Office of Procurement Operations
Ultimate Awardee
Not listed
Set-Aside Type
No Set-Aside Used
Federal Contract Vehicle
Pricing Type
Firm Fixed Price
Legislative Mandate
Clinger Cohen Act
National Interest Action
None
Award Type
Single
Primary Consortia Member
Not listed
Similar IDVs
This federal contract IDV award to Synack, Inc. is for the provision of crowdsourced vulnerability assessment services to the Department of Homeland Security (DHS) under the "Hack DHS" program. The $43,161,835.96 multiple-award Indefinite Delivery Contract (IDC) has a period of performance through September 2025 and enables Synack to deliver ongoing security testing across DHS systems and applications. Under this IDC, Synack has been awarded two specific task orders to date. The...
The Department of Homeland Security (DHS) Office of the Chief Information Officer awarded a single-award Indefinite Delivery Contract (IDC) worth up to $43,161,835.96 to Securesoft Technologies LLC, a minority-owned small business and SBA certified HUBZone firm, to provide crowdsourced vulnerability assessment services for DHS systems through bug bounty programs and responsible disclosure. Under this IDC, Securesoft has received two delivery orders to date. The first is a $815,913.12 firm...
The federal contract IDV award is a $6,563,769.00 Other Transaction vehicle awarded by the Defense Advanced Research Projects Agency (DARPA) to Cromulence LLC, a cybersecurity company based in Melbourne, Florida. The contract is not set-aside and was awarded on August 27, 2024. The purpose of the contract is to support DARPA's research and development efforts across a range of cybersecurity domains, including offensive and defensive capabilities, vulnerability assessment, artificial intelligence...
The Department of Homeland Security (DHS) awarded Leidos, Inc., a large government services contractor, a single award Indefinite Delivery Contract (IDC) valued at up to $519,476,107.37 to provide a broad range of SOC (Security Operations Center) services, cybersecurity support, and IT engineering services to DHS headquarters and components. Under this IDC, Leidos has been awarded multiple delivery orders by DHS's Office of the Chief Information Officer (OCIO) and Cybersecurity and...
The federal contract IDV award is for the Air Force Cyber Multiple Award IDIQ 2015-2018, a $1 billion multiple-award indefinite-delivery/indefinite-quantity (IDIQ) contract awarded by the U.S. Air Force's Air Education and Training Command. The prime contractor for this IDIQ is Vulnerability Research Labs, LLC, a subsidiary of General Dynamics Corporation that specializes in cybersecurity research and vulnerability assessments. Under this IDIQ, Vulnerability Research Labs has been awarded two...
The federal contract indefinite delivery vehicle (IDV) identified by the award number 47QTCA23D0027 is a Federal Supply Schedule contract awarded by the General Services Administration's Federal Acquisition Service to Rapid Strategy Inc., a minority-owned small disadvantaged business. The five-year contract, awarded on December 5, 2022, has a ceiling value of $100,000 and aims to procure highly adaptive cybersecurity services such as risk assessments, vulnerability testing, incident response,...
The federal contract IDV is a multiple award Federal Supply Schedule (FSS) contract awarded to Securicon, LLC, a veteran-owned small business cybersecurity firm. The $1,000,000 ceiling value contract was awarded on May 8, 2023 by the General Services Administration's Federal Acquisition Service and runs through May 7, 2028. The FSS contract provides access to Securicon's information technology professional services and highly adaptive cybersecurity services, including labor categories such as...
The federal contract IDV is a single-award Indefinite Delivery Contract (IDC) awarded by the Naval Information Warfare Systems Command (NAVWAR), a defense agency, to Bowhead Cybersecurity Solutions & Services, LLC, an 8(a) certified Alaska Native Corporation-owned small disadvantaged business. The $92,308,000 contract provides for a range of cybersecurity, information technology (IT), and technical support services, including engineering, vulnerability assessments, auditing, and Section...
The federal contract IDV award is a Government-Wide Acquisition Contract (GWAC) known as the Chief Information Officer - Solutions and Partners 3, Small Business (CIO-SP3 SB) contract, with a total ceiling value of $20 billion. The prime contractor is Validatek-Citi, LLC, a minority-owned small business that provides IT engineering, software development, network services, technical writing, and other specialized technical support to federal agencies. Under this GWAC, Validatek-Citi has been...
The federal contract IDV award is for Analytical Services provided to the Office of the Secretary of Defense. The prime contractor is Corvid Technologies, LLC, a high-tech engineering company founded in 2004 that specializes in advanced modeling, simulation, and computational analysis across defense, aerospace, and other industries. The IDV has a potential value of $99,000,000 and was awarded on February 22, 2024, with a last order date of February 21, 2029. The contract does not have any...
  • 70RTAC22D00000001
    Indefinite Delivery Contract
  • 4
    Federal Contract Awards

The key products and services being delivered under this federal contract IDV award are crowdsourced vulnerability assessment services for the Department of Homeland Security (DHS). The prime contractor, Bugcrowd Inc., a cybersecurity firm specializing in crowdsourced vulnerability assessments, was awarded a single-award Indefinite Delivery Contract (IDC) by the DHS Office of the Chief Information Officer, valued at $43,164,335.96 over a multi-year period. Under this IDC, Bugcrowd provides comprehensive vulnerability discovery assessments, validation and triage, remediation coordination, and detailed reporting across various DHS systems and applications. The contract does not utilize any set-aside designations, indicating Bugcrowd was selected based on its proven capabilities in delivering these services to federal agencies. Task orders issued under the IDC so far include assessments of the AskCISA system, EMPOWHR, GOVTA, and WEBTA applications, as well as the Federal Law Enforcement Training Center's Student Administration and Scheduling System, with a total value of over $490,000. The work is primarily conducted at Bugcrowd's facilities, with occasional on-site interactions in the Washington D.C. area.

The original solicitation, a Request for Information (RFI) issued by DHS, sought to establish an ordering vehicle for crowdsourced vulnerability assessment services through its Hack DHS program. The RFI aimed to identify vendors that could provide an existing security researcher community and platform to support the full scope of work, including pre-assessment research, live vulnerability discovery, validation and triage, remediation coordination, and post-assessment reporting. No set-aside designation was applied, and the initial base period of performance was one year, with four optional one-year extensions.

Generated 6/21/25, 10:10 AM