Bugcrowd: Includes: Crowdcontrol Platform Triage Engine

The California Department of Technology has awarded a contract to ENTISYS360 for information technology services valued at $510,281.11, with a completion date of June 13, 2027. The contract centers on the implementation and management of BugCrowd vulnerability disclosure and security testing services. The primary deliverables include the BugCrowd Crowdcontrol Platform with Triage Engine ($382,513.66), a Vulnerability Disclosure Program to facilitate collaboration with the security researcher community ($120,218.58), and platform fees for the initial service period ($7,548.87).

The contract also includes provisions for a reward pool payment mechanism to incentivize security researchers participating in the vulnerability disclosure program, with funding to be replenished as needed throughout the contract term. These services are designed to enhance California's cybersecurity posture by establishing a structured channel for identifying and addressing security vulnerabilities through coordinated engagement with external security researchers. The contract represents a comprehensive approach to vulnerability management and disclosure coordination for state information technology infrastructure.