Hack DHS: crowdsourced vulnerability assessment services
Active Indefinite Delivery Contract Awarded Last action
- Contract number
- 70RTAC22D00000003
- Awardee
-
Synack, Inc. UEI EDRWE6PRKL85
- Awarding agency
-
Office of Procurement Operations
Department of Homeland Security
- Task orders
- 3 $1,305,208 obligated
Award facts
- Opportunity
-
- Hack DHS: Crowdsourced Vulnerability Assessment Services (CVAS) Pre-Solicitation · 70RTAC22R00000027 · Posted Mar 3, 2022
- Combined order value
-
- $1,305,208 Current, with exercised options
- $1,638,708 Potential, with all options
- Last date to order 81% complete
- IDV ceiling 3% used
- $43,161,835.96
- Award type
- Multiple award
- Who can order
- Only the awarding agency
- Contracting staff
- Funding agency
- Office of the Chief Information Officer Department of Homeland Security
- NAICS code
- 541519 Other Computer Related Services
- Set-aside
- No set-aside
- Competition
- Full and Open Competition · 8 offers Negotiated Proposal / Quote
- Pricing
- Firm Fixed Price
- Legislative mandates
-
- Service Contract Inventory FAR subpart 4.17
Award details come from SAM.gov/FPDS.
About this IDV
The Department of Homeland Security's Office of the Chief Information Officer awarded an indefinite-delivery, multiple-award contract to Synack, Inc. on September 29, 2022, with a ceiling value of $43,161,835.96 and an ultimate completion date of September 28, 2027.
The contract procures crowdsourced vulnerability assessment services (CVAS) through the Hack DHS program. Work scope includes pre-assessment research and recruitment of security researchers, live vulnerability discovery assessments against public-facing and internal DHS systems, vulnerability validation and triage, coordination of remediation efforts, and post-assessment reporting. The contractor must provide an existing security researcher community and platform supporting the full scope, including workflow management APIs and full packet capture monitoring. Place of performance is primarily at contractor facilities with occasional visits to DHS sites in the Washington, D.C. area. The contract has a one-year base period with four optional one-year extensions.
NAICS codes 541511 and 541512 apply. No set-aside category was used; the contract is open competition.
Recent task-order activity under this IDIQ includes a $92,625 firm-fixed-price delivery order issued by DHS's Office of the Chief Information Officer on July 19, 2024, for crowdsourced vulnerability assessment services supporting the U.S. Immigration and Customs Enforcement Mobile Check-In program, with performance in Washington, D.C. and an ultimate completion date of November 18, 2024. Customs and Border Protection issued a $641,000 firm-fixed-price delivery order on July 9, 2026, for bug bounty services, with performance in San Mateo, California and an ultimate completion date of July 8, 2028. An earlier $905,082.75 firm-fixed-price delivery order for bug bounty services was issued to Customs and Border Protection on July 9, 2023, with performance in Chantilly, Virginia and an ultimate completion date of July 8, 2026.
Task orders
| Task order | Ordering agency | Obligated | Awarded |
|---|---|---|---|
| BUG bounty services | Customs and Border Protection | $320,500 | |
| A competitively awarded task order for hack DHS: crowdsourced vulnerability assessment services (cvas) for ICE mobile… | Office of Procurement Operations | $79,625 | |
| BUG bounty hack services. | Customs and Border Protection | $905,083 |
Transactions
| Action | Obligated | Date |
|---|---|---|
| Exercise an Option | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | -$2,500 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Exercise an Option | $0 | |
| Other Administrative Action | $0 | |
| Original award | $2,500 |
Quick answers
Who was awarded contract 70RTAC22D00000003?
70RTAC22D00000003 was awarded to Synack, Inc. by Office of Procurement Operations (Department of Homeland Security) on September 29, 2022.
How much is contract 70RTAC22D00000003 worth?
Orders under 70RTAC22D00000003 have obligated $1,305,208. Their combined potential value, with all options, is $1,638,708. 70RTAC22D00000003's own ceiling is $43,161,836.
How many orders have been placed under contract 70RTAC22D00000003?
3 orders have been placed under 70RTAC22D00000003, the latest on July 9, 2026.
Which agency awarded contract 70RTAC22D00000003?
Office of Procurement Operations (Department of Homeland Security) awarded 70RTAC22D00000003, with funding from Office of the Chief Information Officer (Department of Homeland Security).
Who can order from contract 70RTAC22D00000003?
70RTAC22D00000003 is a multiple award indefinite delivery contract. Only the awarding agency can place orders on it.
Was contract 70RTAC22D00000003 competed?
The extent of competition for 70RTAC22D00000003 was full and open competition. The government received 8 offers.
On GovTribe
See this IDV's full record
- Every order and transaction
- The awardee's other awards and teaming partners
- Similar IDVs and recompete opportunities
- Ask GovTribe AI about this IDV