The key products and services being delivered under this federal contract IDV award are crowdsourced vulnerability assessment services for the Department of Homeland Security (DHS). The prime contractor, Bugcrowd Inc., a cybersecurity firm specializing in crowdsourced vulnerability assessments, was awarded a single-award Indefinite Delivery Contract (IDC) by the DHS Office of the Chief Information Officer, valued at $43,164,335.96 over a multi-year period. Under this IDC, Bugcrowd provides comprehensive vulnerability discovery assessments, validation and triage, remediation coordination, and detailed reporting across various DHS systems and applications. The contract does not utilize any set-aside designations, indicating Bugcrowd was selected based on its proven capabilities in delivering these services to federal agencies. Task orders issued under the IDC so far include assessments of the AskCISA system, EMPOWHR, GOVTA, and WEBTA applications, as well as the Federal Law Enforcement Training Center's Student Administration and Scheduling System, with a total value of over $490,000. The work is primarily conducted at Bugcrowd's facilities, with occasional on-site interactions in the Washington D.C. area. The original solicitation, a Request for Information (RFI) issued by DHS, sought to establish an ordering vehicle for crowdsourced vulnerability assessment services through its Hack DHS program. The RFI aimed to identify vendors that could provide an existing security researcher community and platform to support the full scope of work, including pre-assessment research, live vulnerability discovery, validation and triage, remediation coordination, and post-assessment reporting. No set-aside designation was applied, and the initial base period of performance was one year, with four optional one-year extensions.
Mod # | Description | Reason For Modification | Federal Obligation (Click to sort descending) | Date (Click to sort ascending) |
|---|---|---|---|---|
| P00005 | Other Administrative Action | ($2k) | 6/20/25 | |
| P00004 | Exercise an Option | $0 | 9/17/24 | |
| P00003 | Other Administrative Action | $0 | 3/1/24 | |
| P00002 | Exercise an Option | $0 | 9/7/23 | |
| P00001 | Other Administrative Action | $0 | 4/10/23 |
Name | Description | Awardee | Potential Value (Click to sort descending) | Award Date (Click to sort descending) | Completion Date (Click to sort descending) | Updated At (Click to sort descending) |
|---|---|---|---|---|---|---|
Delivery Order 70RTAC22D00000001-70RTAC23FR0000073 | Bugcrowd Inc. | $115.6k | 6/28/23 | 9/27/23 | 6/24/24 | |
Delivery Order 70RTAC22D00000001-70RTAC24FR0000081 | Bugcrowd Inc. | $92.6k | 8/12/24 | 12/11/24 | 9/26/24 | |
Delivery Order 70RTAC22D00000001-70RTAC24FR0000026 | Bugcrowd Inc. | $192.0k | 2/12/24 | 5/31/24 | 4/24/24 | |
Delivery Order 70RTAC22D00000001-70RTAC25FR0000011 | Bugcrowd Inc. | $92.6k | 12/4/24 | 6/3/25 | 12/4/24 |