The Department of Homeland Security (DHS) awarded Synack, Inc. an Indefinite Delivery Contract (IDC) worth up to $43,164,335.96 to provide crowdsourced vulnerability assessment services through the Hack DHS program. This multiple award IDC has a period of performance through September 2025. Under the contract, Synack uses its existing community of security researchers and platform capabilities to conduct authorized vulnerability discovery activities on DHS systems.
DHS has issued two delivery orders to date under this IDC. The first, a $92,625 firm-fixed-price contract awarded in July 2024, is for crowdsourced vulnerability assessment services focused on the ICE Mobile Check-In program. The second, a $905,082.75 firm-fixed-price contract awarded in July 2023, is for bug bounty hack services targeting Customs and Border Protection systems over a 3-year period. Neither delivery order utilizes any set-aside designations. The contracted services aim to identify vulnerabilities in DHS applications and systems through coordinated testing by Synack's vetted security research community.
Generated 9/18/24, 9:09 AM