Cvdd program ceiling
Ended Awarded Last action
- Contract number
- HQ003418D0032
- Awardee
-
Hackerone Inc. UEI KGSEGCXA2JN1
- Awarding agency
-
Washington Headquarters Service
Department of Defense
- Task orders
- 6 $2,299,534 obligated
Award facts
- Opportunity
-
- DDS Crowdsourced Vulnerability Discovery & Disclosure Services (CVDD) FA2 Solicitation · HQ003418R0202 · Posted Jul 13, 2018
- Crowdsourced Vulnerability Discovery and Disclosure (CVDD) Services Award Notice · Posted Oct 23, 2018
- Combined order value
- $2,299,534 Current and potential, with all options
- Last date to order 100% complete
- IDV ceiling 7% used
- $34,000,000.00
- Maximum order
- $5,000,000.00
- Award type
- Multiple award
- Who can order
- Defense agencies
- Contracting staff
- Funding agency
- Office of the Secretary of Defense Department of Defense
- NAICS code
- 541519 Other Computer Related Services
- PSC
- R499 Support- Professional: Other
- Set-aside
- Total Small Business
- Competition
- Full and Open Competition after exclusion of sources · 3 offers Negotiated Proposal / Quote
- Pricing
- Firm Fixed Price
Award details come from SAM.gov/FPDS.
About this IDV
The Office of the Secretary of Defense awarded an Indefinite Delivery Contract (IDC) under the Crowdsourced Vulnerability Discovery and Disclosure (CVDD) program to HackerOne Inc., a for-profit cybersecurity services provider. The total small business set-aside contract has a ceiling value of $34,000,000. Through this IDC and associated delivery orders, HackerOne provides the Department of Defense with a range of cybersecurity services, including bug bounty programs, vulnerability disclosure, penetration testing, and crowdsourced security assessments. The contract work is performed primarily in the Washington D.C., San Francisco, and Arlington, VA areas. Recent delivery orders under this IDC have ranged from $309,748 to $513,000 for specific services such as providing CVDD bug bounty programs, CUAS and MYSTATUS CVDD services, and general crowdsourced vulnerability discovery and disclosure. This IDC supports the Department of Defense's efforts to enhance information security through the use of crowdsourcing and ethical hacking techniques.
The original CVDD solicitation was issued by the Office of the Secretary of Defense in July 2018 as a total small business set-aside. It sought proposals for a multiple award IDIQ contract to provide crowdsourced vulnerability discovery and disclosure services across the Department of Defense. The solicitation included requirements for bug bounty software, vulnerability disclosure programs, penetration testing, and other cybersecurity assessments leveraging crowdsourced expertise. The resulting CVDD IDIQ contract was awarded in September 2018, enabling the Department to issue subsequent delivery orders to HackerOne and other small business contractors for these critical cybersecurity services.
Task orders
| Task order | Ordering agency | Obligated | Awarded |
|---|---|---|---|
| Cvdd BUG bounty services | Washington Headquarters Service | $492,650 | |
| Cuas and mystatus cvdd services | Washington Headquarters Service | $217,100 | |
| Information technology security penetration testing | Washington Headquarters Service | $441,798 | |
| Crowdsourcing used to enhance information security | Washington Headquarters Service | $309,748 | |
| Bounty payouts | Washington Headquarters Service | $513,000 | |
| Crowdsourced vulnerability discovery & disclosure | Washington Headquarters Service | $325,238 |
Transactions
| Action | Obligated | Date |
|---|---|---|
| Other Administrative Action | $0 | |
| Other Administrative Action | $0 | |
| Other Administrative Action | $0 | |
| Change Order | $0 | |
| Other Administrative Action | $0 | |
| Exercise an Option | $0 | |
| Exercise an Option | $0 | |
| Original award | $0 |
Quick answers
Who was awarded contract HQ003418D0032?
HQ003418D0032 was awarded to Hackerone Inc. by Washington Headquarters Service (Department of Defense) on September 30, 2018.
How much is contract HQ003418D0032 worth?
Orders under HQ003418D0032 have obligated $2,299,534. HQ003418D0032's own ceiling is $34,000,000. A single order can be worth up to $5,000,000.
How many orders have been placed under contract HQ003418D0032?
6 orders have been placed under HQ003418D0032, the latest on June 29, 2022.
Which agency awarded contract HQ003418D0032?
Washington Headquarters Service (Department of Defense) awarded HQ003418D0032, with funding from Office of the Secretary of Defense (Department of Defense).
Who can order from contract HQ003418D0032?
HQ003418D0032 is a multiple award indefinite delivery contract. Defense agencies can place orders on it.
Is contract HQ003418D0032 part of a contract vehicle?
Yes. HQ003418D0032 is part of Crowdsourced Vulnerability Discovery and Disclosure (CVDD).
Was contract HQ003418D0032 competed?
The extent of competition for HQ003418D0032 was full and open competition after exclusion of sources. The government received 3 offers. It was set aside: Total Small Business.
On GovTribe
See this IDV's full record
- Every order and transaction
- The awardee's other awards and teaming partners
- Similar IDVs and recompete opportunities
- Ask GovTribe AI about this IDV