Bug Bounty Synack

Past New Requirement Updated

Agency
Solicitation expected
Estimated value
$1,000,000 to $2,000,000
Set-aside
No set-aside

Forecast facts

Anticipated award
Through
NAICS code
541513 Computer Facilities Management Services
Place of performance
Ashburn, VA
Forecast number
F2026072326
Points of contact

Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.

About this forecast

Written by GovTribe AI ·

The Department of Homeland Security Customs and Border Protection is procuring crowdsourced vulnerability assessment services through a Bug Bounty Synack contract to support FISMA compliance and the Hack DHS Act mandate, granting authorized computer security specialists and researchers temporary access to CBP IT systems to identify and report vulnerabilities in exchange for payment. The solicitation released on May 20, 2026, with award anticipated on July 9, 2026, under a Firm Fixed Price contract for Large Business with no set-aside. The period of performance runs from July 9, 2026, through July 8, 2031.

The estimated contract award value ranges from $1,000,000 to $2,000,000 for work performed in Ashburn, Virginia. Melissa Lewis (melissa.a.lewis@cbp.dhs.gov, 202-313-1194) in the Mission Support Requirements Office serves as the primary contact, with Corteney Ugenyi (corteney.d.ugenyi@cbp.dhs.gov, 703-593-1076) as alternate contact.

Forecast text

Bug Bounty will support securing IT systems under the Federal Information Security Modernization Act (FISMA). Additionally, H.R.2774 – 115th Congress introduced the Hack DHS Act. S.1281 – 115th Congress was passed by the Senate and is currently working through Congress/President. The bill directs DHS to establish a “bug bounty” program to assist in minimizing vulnerabilities to DHS information technology (IT) systems. A "bug bounty program" is a program under which an authorized computer security specialist or security researcher is given temporary access to IT systems for the purpose of identifying and reporting vulnerabilities in exchange for payment.

Acquisition Strategy: Large Business

On GovTribe

Work this forecast

  • Track it in your pipeline
  • Find teaming partners
  • Similar forecasts
  • Ask GovTribe AI about this forecast
Try for free Login