The General Services Administration (GSA) today announced that it awarded a $2 million contract to HackerOne for the facilitation of GSA’s bug bounty programs. The contract with GSA’s Technology Transformation Service marks HackerOne’s first expansion outside of the Department of Defense. The contract has a base performance period of six months and allows for nine option periods of six months each, for a grand total of five years. Before awarding the contract, GSA partnered with HackerOne in August 2017. The initial collaboration focused on Federalist website publishing service, with GSA later adding additional domains. “The Technology Transformation Service bug bounty program with HackerOne is yet another reminder of the leadership role that the U.S. Federal government has taken in vulnerability disclosure,” said Marten Mickos, CEO of HackerOne, in a statement. “Over the last year, GSA has proved to be one of the fastest government agencies in regards to resolution time, resolving vulnerabilities markedly faster than the global average for government bug bounty programs.”
