26-0220687. CDT. Bugcrowd

The California Department of Technology is requesting quotations for renewal of Bugcrowd Software as a Service, with quotes due August 19, 2026 at 5:00 p.m. Pacific Time and an anticipated award date of August 21, 2026. Small Business (SB) preference and Disabled Veterans Business Enterprise (DVBE) participation requirements apply.

California-certified Small Businesses may claim an SB preference; non-SB bidders qualify for a 5% SB preference if they commit to subcontracting at least 25% to certified SBs. DVBE participation is required, with incentive scales ranging from 1% to 5% based on confirmed participation levels. Target Area Contract Preference Act (TACPA) preferences are available to qualifying bidders.

The scope encompasses a comprehensive security research platform including the Crowdcontrol Platform with Triage Engine, Crowd Engine for researcher matching, validation services, a Vulnerability Disclosure Program (VDP Professional) with public or private program access, embedded submission forms, unlimited triage and validation, program health monitoring, a researcher reward pool, platform access with real-time submissions dashboard, SDLC integrations, and dedicated program management. The contract covers 1–99 licensee days.

Licensee sites are located at CDT's Office of Technology Services in Rancho Cordova, California and the Gold Camp Campus in Vacaville, California. The contract term runs from approval through June 13, 2027. Payment is annual in advance upon receipt of a correct invoice. The State reserves the right to terminate with thirty calendar days' notice.

Bidders must submit responses via two separate emails—one containing the complete bid packet marked "MASTER" and one containing only the cost worksheet marked "COST BID." All documentation must be completed, signed, and dated by the deadline. Required certifications include the Payee Data Record (STD 204), Payee Data Record Supplement (STD 205), Bidder Declaration Form, California Civil Rights Laws Certification, Federal Debarment Certification, Byrd Anti-Lobbying Amendment Form, and upon contract completion, the Prime Contractor's Certification – DVBE Subcontracting Report (STD 817). The State will award to the lowest responsive and responsible bidder. CDT will withhold up to $10,000 pending receipt of accurate DVBE documentation.