Questions and Answers for RFQ 47HAA020Q0129.pdf

This document provides questions and answers related to Request for Quotation 47HAA020Q0129 issued by the General Services Administration. The solicitation seeks a bug bounty software-as-a-service platform from HackerOne to deliver a bug bounty program for the GSA's security operations team to utilize on various public-facing web applications. The platform must provide researchers access to report vulnerabilities and allow GSA to manage and track issues across applications, triage reported vulnerabilities, disburse rewards for effective findings, and communicate rejection reasons. Vulnerability report triage services must be provided separately for each application. HackerOne must also supply staff specialized in reviewing reports and coordinating with researchers. The questions covered scope such as whether non-U.S. companies and remote work could participate, proposal submission method, and extension availability. The NAICS code was changed from 561611 to 541519.