DDS runs Bug Bounties for the Department of Defense.
A Bug Bounty is a time-boxed assessment where monetary rewards are given to security researchers/ethical hackers in exchange for reporting bugs or vulnerabilities in systems. Some of our past DoD business partners/asset owners have included the U.S. Army, U.S. Navy, U.S. Air Force, U.S. Marine Corps, DoD agencies and offices, and the Pentagon itself.
Our DoD business partners/asset owners choose us because we increase their resistance to attack by mobilizing or tapping into the world’s top security researchers to identify vulnerabilities on their behalf.
We Test DoD Websites, Apps, Public Facing Assets, And More
To start the process for running a Bug Bounty please email us at ↳
hackthepentagon
[at] dds.mil and we will get back to you as soon as possible to determine if you are a good candidate
to run a Bug Bounty.
Note: we do not work directly with security researchers. To work with us, sign-up with a vendor in the crowdsourced vulnerability area*. Some US vendors we work with include: Bug Crowd, HackerOne, and Synack.
*DDS/CDAO do not have any involvement in this process and vendor listings may change at any time and do not reflect endorsement by the Department of Defense or the United States Government.
For press & speaking inquiries contact us at ↳ press [at] dds.mil
Interested in working within the DoD?
Keep an eye out for open positions at DDS.mil/jobs.
To learn more about Defense Digital Service or the Chief Digital and Artificial Intelligence Office
visit:
DDS.mil or AI.mil