Defense Digital Service Announced the Launch of DDS’s 11th Bug Bounty Program with HackerOne

HackerOne | January 07, 2021

The Defense Digital Service (DDS) and HackerOne today announced the dispatch of DDS's 11th bug abundance program with HackerOne and the third with the U.S. Branch of the Army. Hack the Army 3.0 is a period bound, programmer controlled security test pointed toward surfacing weaknesses so they can be settled before they are abused by foes. The bug abundance program is available to both military and regular citizen members and will run from January 6, 2021 through February 17, 2021.

Bug abundance programs, similar to Hack the Army 3.0, boost security examination and announcing of genuine security weaknesses in return for money related awards for qualified weaknesses and members. These projects are an industry best practice utilized by the most full grown associations across the world. By unveiling weaknesses to security groups, regular citizen and military programmers will help the U.S. Armed force secure digital resources and guard against cyberattacks. Hack the Army is one illustration of the Army and DoD's ability to seek after imaginative and nontraditional ways to deal with guarantee the capacity and security of individuals, organizations, and information.

"Bug bounty programs are a unique and effective 'force multiplier' for safeguarding critical Army networks, systems and data, and build on the efforts of our Army and DoD security professionals," said Brig. Gen. Adam C. Volant, U.S. Army Cyber Command Director of Operations. "By 'crowdsourcing' solutions with the help of the world's best military and civilian ethical hackers, we complement our existing security measures and provide an additional means to identify and fix vulnerabilities. Hack the Army 3.0 builds upon the successes and lessons of our prior bug bounty programs."

“We are proud of our continued partnership with the Army to challenge the status quo in strengthening the security of military systems and shifting government culture by engaging ethical hackers to address vulnerabilities,” says Brett Goldstein, Director, Defense Digital Service. “We’re calling on civilian and military hackers to show us what they’ve got in this bug bounty and to help train the future force.”

Participation in the Hack the Army 3.0 bug abundance challenge is open by greeting just to regular citizen programmers and dynamic U.S. military individuals. Bug bounties might be offered to regular citizen programmers for substantial security weaknesses as indicated by the program strategy. Military and temporary worker staff are not qualified to get monetary prizes.

“We are living in a different world today than even just a year ago,” said Marten Mickos, CEO of HackerOne. “Amidst disinformation and a global health crisis, citizens are increasingly wary of how, when, and where their information is used. For years, the U.S. Department of Defense and respective military branches have successfully strengthened their cybersecurity posture and protected precious data by enlisting the help of ethical hackers on HackerOne. Years later, hacker-powered security is not only a best practice in the US military, but it is now a mandated requirement among civilian federal agencies. There is only one way to secure our connected society, together, and the U.S. Army is leading the charge with this latest challenge.”

DDS has been a harbinger in programmer fueled security testing since the time the dispatch of "Hack the Pentagon" in 2016. DDS's Hack the Pentagon group has executed 14 public bounties on outside confronting sites and applications, and ten private bounties on a scope of delicate, inside frameworks in the U.S. Branch of Defense (DoD). Instances of past private bounties incorporate coordinations frameworks, actual equipment, and faculty frameworks.

In partnership with DDS, HackerOne has launched more federal programs than any other hacker-powered security provider and is the only bug bounty platform that is FedRAMP authorized. Previous bug bounty challenges and results include: Hack the Pentagon, Hack the Army, Hack the Air Force, Hack the Air Force 2.0, Hack the Defense Travel System, Hack the Army 2.0, Hack the Air Force 3.0, Hack the Air Force 4.0, Hack the Proxy and Hack the Marine Corps. DDS also launched a Vulnerability Disclosure Program (VDP) for the DoD in 2016, which is now one of the most successful programs of its kind with hackers reporting over 20,000 security vulnerabilities to date. Hackers who become aware of any vulnerabilities can safely disclose them to the DoD at any time through this ongoing VDP with HackerOne.

About HackerOne

HackerOne empowers the world to build a safer internet. As the world’s most trusted hacker-powered security platform, HackerOne gives organizations access to the largest community of hackers on the planet. Armed with the most robust database of vulnerability trends and industry benchmarks, the hacker community mitigates cyber risk by searching, finding, and safely reporting real-world security weaknesses for organizations across all industries and attack surfaces. Customers include The U.S. Department of Defense, Dropbox, General Motors, GitHub, Goldman Sachs, Google, Hyatt, Intel, Lufthansa, Microsoft, MINDEF Singapore, Nintendo, PayPal, Slack, Starbucks, Twitter, and Verizon Media. HackerOne was ranked fifth on the Fast Company World’s Most Innovative Companies list for 2020. Headquartered in San Francisco, HackerOne has a presence in London, New York, the Netherlands, France, Singapore, and over 70 other locations across the globe.

About Defense Digital Service

The Defense Digital Service was established by the U.S. Secretary of Defense in November 2015 as a SWAT team of nerds that provides the best in modern technical knowledge designed to bolster national defense. We are primarily based in the Pentagon, but we also have satellite offices in Augusta, Georgia and co-located at the Defense Innovation Unit in Mountain View, California. Our range of talent includes world-class software developers, designers, product managers, digital experts and bureaucracy hackers from both the private sector and within government.


President Trump addresses media on the passing of George H. W. Bush at news conference when meeting with the Chancellor of the Federal Republic of Germany Angela Merkel at G-20 Summit in Buenos Aires, Argentina.


President Trump addresses media on the passing of George H. W. Bush at news conference when meeting with the Chancellor of the Federal Republic of Germany Angela Merkel at G-20 Summit in Buenos Aires, Argentina.

Related News


Kwizcom has been approved as a Microsoft Cloud Solution Provider for the U.S. Government

KWizCom | March 24, 2021

KWizCom, a global leader in the development of SharePoint Forms and Workflows, as well as other SharePoint web sections and applications for Microsoft 365, is pleased to announce that their Cloud Solution Provider (CSP) for Microsoft Cloud for US Government has been approved. The Microsoft Cloud for Government is a comprehensive portal for US government public sector agencies. The portal is designed exclusively for federal, state, and local governments to comply with the US government's stringent protection and enforcement regulations. The US government agencies will also take advantage of the KWizCom's Microsoft 365 applications accessible via the system, in addition to being able to transfer their existing system to a cloud-based system to improve efficiency, reliability, and minimise costs. Via the Cloud Solution Provider programme (CSP) for Microsoft Cloud for US Government, KWizCom will now offer Microsoft cloud solutions and services to federal, state, local, and tribal agencies in the United States. About the company’s most recent achievement KWizCom’s Product Group Manager Nimrod Geva said, “We are happy to answer many of our US government customers’ requirements, by being able to provide our apps to customers who are switching to the Microsoft Government cloud.” About KWizCom Corporation Since 2005, KWizCom has provided innovative solutions and services to make SharePoint even better for over 10,000 companies worldwide. KWizCom's solutions and services expand Microsoft SharePoint out-of-the-box capabilities, streamline workflow, maximize efficiency and enhance over-all productivity for hundreds of thousands of users. KWizCom, a Gold Certified Microsoft Partner, is headquartered in Toronto, Canada.

Read More


KeyLogic Continues Growth in West Virginia

KeyLogic | March 24, 2022

West Virginia's KeyLogic has built a top-tier company focused on supporting critical national Department of Energy, Commerce, and Defense missions. Though KeyLogic has grown significantly, the company remains true to its West Virginia roots and core values and committed to the small business community. A robust mentor-protégé program is one way the company helps other businesses grow and deepen their impact in West Virginia. KeyLogic recently formed a mentor-protégé partnership with BCS, a minority-owned small business with a 30-year history of serving government, research, and private sector clients. The partnership is part of the U.S. Small Business Administration Mentor-Protégé Program. A decade ago, KeyLogic participated in a similar Department of Defense mentor protégé program when it was a small business, which helped propel the company. As we have grown, we have not forgotten the importance of small businesses and the entrepreneurial 'fire in the belly' spirit. The DOD Mentor-Protégé Program was in important catalyst for KeyLogic, and it is our privilege to now 'pay it forward' and support others on their journey through growth. It's also a competitive advantage for us to team with emerging small businesses like BCS who deliver tremendous value and impact to clients." Jon Hammock, KeyLogic's founder and current Chief Experience Officer BCS Executive Vice President Ken Green said, "BCS is thrilled to form an official partnership with KeyLogic, a company we have admired for years because they share our commitment to making a difference for clients and the nation, particularly in the energy sector, and genuinely support their employees, partners, and local growth." KeyLogic began as a small entrepreneurial company founded in West Virginia in 1999 and is now recognized as a national leader, growing from two people in Morgantown to nearly 700 employees nationwide. In 2021, the company integrated four companies—KeyLogic Systems, Information International Associates (IIA), OnLocation, and R2i—which are now collectively known as KeyLogic. The headquarters remains in Morgantown. "We have deep roots in West Virginia," continued Hammock. "One of our greatest pleasures is seeing employees rise through their career, buy homes, start families, and contribute locally. I like to think KeyLogic has created opportunities that otherwise might not have existed in our region." In addition to the relationship with BCS, KeyLogic is in a second SBA Mentor-Protégé Program partnership with Bravo Consulting Group, LLC, which also has strong ties to West Virginia. Bravo President and CEO Gino Degregori is a proud graduate of WVU and believes, "There is endless opportunity in West Virginia. My family immigrated to the U.S. when I was young, and I recognize and appreciate the talent and work ethic of the people here. I can sense the momentum in Morgantown and across the state. In concert with KeyLogic, one of our highest priorities is supporting economic growth and creating jobs in West Virginia." KeyLogic currently employs approximately 80 people in West Virginia, BCS plans to re-establish a Morgantown presence as part of the mentor-protégé relationship, and Bravo also has an office and presence in Morgantown. Through partnerships like these, KeyLogic is bringing more services to customers, staying true to its company values and entrepreneurial spirit, and becoming a better business, all while helping others grow and succeed. "It feels good to be in a position to give back—both to rising small businesses and to the West Virginia community where it all began," said Hammock. About KeyLogic KeyLogic employs over 700 team members—with approximately 80 employees in West Virginia and over 130 in Southwestern Pennsylvania—including systems designers, developers, data scientists, IT and cybersecurity specialists, engineers, mission experts, program managers, and more than 70 Ph.D. scientists. This multidisciplinary team works together solving challenging problems with anticipatory service—always staying one step ahead—benefiting our customers, and ultimately helping build a better world. Supporting critical missions at the intersection of data and science, KeyLogic provides mission management, systems analysis, data analytics, digital transformation, and cybersecurity to customers in the energy, federal civilian, and defense sectors, with a 20+ year portfolio of successes supporting DOE, DOC, EPA, DOD, DHS, FBI, and other federal agencies challenged with complex missions. We help our customers solve the world's most challenging problems with unsurpassed anticipatory service. About BCS BCS is a minority-owned small business with a 30-year history of helping government, research, and private sector clients implement their programs and missions and achieve success. We offer a breadth of professional support services in the areas of business management, communications, systems engineering, analysis, and organization performance. We pride ourselves on being a company that builds strong, long-lasting, and trusted relationships with our clients based on our ability to understand and anticipate their needs; develop tailored, effective solutions to meet those needs; and leverage resources and expertise from across our organization to see them through. Bravo Consulting Group, LLC (Bravo) taps into the power of Microsoft technologies to develop custom software applications and solutions for Federal, State, Local, and Commercial organizations. Since our inception in 2007, we have pioneered enterprise applications that have become central components in our clients' business success. Our customer-centric focus has allowed us to implement improved technologies, develop high-end business solutions, and transform digital services.

Read More


Parsons Corporation Ready to Protect U.S. Air Force Air Bases

Parsons | January 25, 2021

Parsons Corporation announced today that it would lead an industry team of Leidos, SAIC and SRC, Inc., in pursuit of a 10-year, $953 million exertion with the U.S. Air Forces in Europe and Air Forces Africa to design, mature, procure, incorporate, work, and keep up Air Base Air Defense systems across the European and African mainland areas of responsibility. "As asymmetric threats from emerging technologies continue to proliferate, we're focused on developing a flexible, responsive, all-domain air base defense system to rapidly detect, alert, deny or defeat threats ranging from low-cost irregular attacks to hypersonic weapons," said Shaun McGrath, ABAD program manager at Parsons. "Our team's open architecture, platform-agnostic approach, coupled with cutting edge technologies and innovation labs, brought together by a team with relevant operational experience in all-domain systems integration, creates a best value and highly capable offering that will deliver scalable air base air defense systems to protects warfighters and their assets today and into the future." The Parsons team will focus on the maturation of an all-space system comprised of business off-the-shelf and government off-the-shelf software and equipment technologies with an incorporated design to protect existing and future air bases. Parsons touches each aspect of the all-area battlespace: from space operations to edge computing and full-spectrum digital; to ground-based order and control systems. The organization's demonstrated operational capabilities will ensure all-space superiority and data predominance to quicken decision making in permissive through profoundly contested environments. Leidos provides a diverse arrangement of systems, solutions, and services covering air, land, sea, space, and cyberspace for customers around the world – including the U.S. Armed force, U.S. Air Force, U.S. Naval force, Defense Information Systems Agency (DISA), NATO, and the Intelligence Community. Their solutions include enterprise and mission IT, huge scale insight systems, order and control, geospatial and information analytics, cybersecurity, logistics, preparing, knowledge analysis, and operations support. Science Applications International Corp's. (SAIC's) robust arrangement of offerings includes top of the line solutions in systems designing and combination; enterprise IT, including cloud services, digital, and software; progressed analytics and simulation; and preparing that will be used to propel the ABAD mission and protect sent warfighters. SRC, Inc., a not-revenue driven research and advancement organization, solves "impossible" problems in the areas of defense, climate, and insight. The organization helps protect America and its allies with cutting edge radars, electronic fighting systems, RF system analysis, simulation, and reconstructing technologies and services. Since 1957, SRC's obligation to the customer and the best solution — not the main concern — has stayed a basic belief that guides its efforts. About Parsons Parsons (NYSE: PSN) is a leading disruptive technology provider in the global defense, intelligence, and critical infrastructure markets, with capabilities across cybersecurity, missile defense, space, connected infrastructure, and smart cities. Please visit and follow us on LinkedIn and Facebook to learn how we're making an impact. About Leidos Leidos is a Fortune 500® information technology, engineering, and science solutions and services leader working to solve the world's toughest challenges in the defense, intelligence, homeland security, civil, and health markets. The company's 38,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Va., Leidos reported annual revenues of approximately $11.09 billion for the fiscal year ended January 3, 2020.

Read More