Hack DHS: crowdsourced vulnerability assessment services
Active Indefinite Delivery Contract Awarded Last action
- Contract number
- 70RTAC22D00000002
- Awardee
-
Securesoft Technologies LLC UEI YC26U71KXPW5
- Awarding agency
-
Office of Procurement Operations
Department of Homeland Security
- Task orders
- 3 $969,035 obligated
Award facts
- Opportunity
-
- Hack DHS: Crowdsourced Vulnerability Assessment Services (CVAS) Pre-Solicitation · 70RTAC22R00000027 · Posted Mar 3, 2022
- Combined order value
-
- $969,035 Current, with exercised options
- $993,038 Potential, with all options
- Last date to order 81% complete
- IDV ceiling 2% used
- $43,161,835.96
- Award type
- Single award
- Who can order
- Only the awarding agency
- Contracting staff
- Funding agency
- Office of the Chief Information Officer Department of Homeland Security
- NAICS code
- 541519 Other Computer Related Services
- Set-aside
- No set-aside
- Competition
- Full and Open Competition · 8 offers Negotiated Proposal / Quote
- Pricing
- Firm Fixed Price
- Legislative mandates
-
- Service Contract Inventory FAR subpart 4.17
Award details come from SAM.gov/FPDS.
About this IDV
The Department of Homeland Security's Office of the Chief Information Officer awarded a single-award indefinite-delivery contract to Securesoft Technologies LLC on September 29, 2022, with a ceiling of $43,161,835.96 for crowdsourced vulnerability assessment services. Securesoft is an SBA-certified HUBZone firm and minority-owned small business. No set-aside applies.
Work is performed primarily at contractor facilities in Chantilly, Virginia, with occasional visits to DHS sites in the Washington D.C. area. The contract supports the Hack DHS program, encompassing pre-assessment recruitment of security researchers, live vulnerability discovery assessments against public-facing and internal DHS systems, vulnerability validation and triage, remediation coordination, and post-assessment reporting. Vendors provide an existing security researcher community and platform with workflow management APIs and full packet capture monitoring.
The base period runs one year with four optional one-year extensions, terminating September 28, 2027. NAICS codes 541511 and 541512 apply.
Under this IDIQ, Securesoft has received delivery orders from both DHS Office of the Chief Information Officer and Customs and Border Protection. A $815,913.12 bug bounty ethical hacking order from CBP, awarded May 24, 2023, extends through May 23, 2027. Two vulnerability assessment delivery orders valued at $88,562.50 each support the CBP Chatbot and EMMA Chat systems, awarded May 30, 2025, and September 18, 2025, respectively. The CBP Chatbot order performance extends through February 14, 2032.
Task orders
| Task order | Ordering agency | Obligated | Awarded |
|---|---|---|---|
| Crowdsourced vulnerability assessment services (cvas) for CBP chatbot | Office of Procurement Operations | $76,563 | |
| Hack DHS crowdsourced vulnerability assessment services for emma chat | Office of Procurement Operations | $76,563 | |
| BUG bounty ethical hacker | Customs and Border Protection | $815,910 |
Transactions
| Action | Obligated | Date |
|---|---|---|
| Exercise an Option | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | -$2,500 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Original award | $2,500 |
Quick answers
Who was awarded contract 70RTAC22D00000002?
70RTAC22D00000002 was awarded to Securesoft Technologies LLC by Office of Procurement Operations (Department of Homeland Security) on September 29, 2022.
How much is contract 70RTAC22D00000002 worth?
Orders under 70RTAC22D00000002 have obligated $969,035. Their combined potential value, with all options, is $993,038. 70RTAC22D00000002's own ceiling is $43,161,836.
How many orders have been placed under contract 70RTAC22D00000002?
3 orders have been placed under 70RTAC22D00000002, the latest on September 18, 2025.
Which agency awarded contract 70RTAC22D00000002?
Office of Procurement Operations (Department of Homeland Security) awarded 70RTAC22D00000002, with funding from Office of the Chief Information Officer (Department of Homeland Security).
Who can order from contract 70RTAC22D00000002?
70RTAC22D00000002 is a single award indefinite delivery contract. Only the awarding agency can place orders on it.
Was contract 70RTAC22D00000002 competed?
The extent of competition for 70RTAC22D00000002 was full and open competition. The government received 8 offers.
On GovTribe
See this IDV's full record
- Every order and transaction
- The awardee's other awards and teaming partners
- Similar IDVs and recompete opportunities
- Ask GovTribe AI about this IDV