Hack the Pentagon 3. 0 CVDD

The Department of Defense Washington Headquarters Services seeks to engage a contractor to conduct a crowdsourced vulnerability discovery and disclosure exercise of the Pentagon Facilities Services Directorate Facility Related Controls System network. Interested vendors must submit a capability statement not exceeding two pages by January 25th, 2023, detailing their business size standard and any governmentwide contract vehicles held under NAICS 541519. The selected contractor will utilize an existing platform to manage researchers, triage vulnerability reports, and facilitate communication between researchers and government remediation teams over a one-year base period and four one-year option periods.

There is no set-aside designation for this requirement. The contractor must comply with all applicable regulations and policies. The government will provide workspace, utilities, equipment, and subject matter experts to support the effort. No budget range or potential value was included, though the network spans several Pentagon facilities and centers to be assessed by an unlimited number of approved researchers over the five-year period.