A Bug Bounty is a time-boxed assessment where monetary rewards are given to security researchers/ethical hackers in exchange for reporting bugs or vulnerabilities in systems. Some of our past DoD business partners/asset owners have included the U.S. Army, U.S. Navy, U.S. Air Force, U.S. Marine Corps, DoD agencies and offices, and the Pentagon itself.
We Test DoD Websites, Apps, Public Facing Assets, And More
A Bug Bounty is a highly coordinated and secured competition where ethical hackers are awarded monetary compensation for successfully discovering and reporting vulnerabilities through pre-established channels.
Learn more about current policy regarding Bug Bounties:
Bug Bounties are a rapid and more cost-efficient way for DoD to identify and remediate unknown vulnerabilities before the adversary can exploit them.
Bug Bounties are invitations to security researchers to hack specific systems within published rules of engagement whose findings are incentivized with financial award.
In a Vulnerability Disclosure Program (VDP), researchers report vulnerabilities on the honor system. Findings are acknowledged but there is no financial award.
We facilitate procurement, project management, & platform management for reporting
Our programs are cost efficient with a proven history of ROI
We offer flexibility in testing scale and a diversity of researchers
Our Bug Bounties generate real and actionable results for reporting and remediation
Based On The Average Of 40+ Bounties
Average Bug Bounty Cost:
$300K
Average Vulnerability Count:
38
Critical=11 High=23 Medium=4
40+ Bug Bounties Run
We have run both private (hand-selected, cleared security researchers) and public (open to a wider and global security researcher community) bounties with the U.S. Army, U.S. Navy, U.S. Air Force, U.S. Marine Corps, DoD agencies and offices, and the Pentagon itself.
1400+ Security Researchers Sourced
Also known as “white hats” or ethical hackers, security researchers are security experts that proactively perform assessments designed to find vulnerabilities and improve your organization’s security.
2100+ Vulnerabilities Found
Since 2016, Hack the Pentagon bounties have repeatedly tested DoD assets as an adversary would.
Average Bounty Vulnerability Count: 38
→ Critical = 11
→ High = 23
→ Medium= 4
Want To Report A Vulnerability?
Need A 1 Pager To Share With Your DoD Organization?
Explore The Bounty Playbook To Learn About The Bounty Process
Are You A Good Candidate To Run A Bug Bounty?
