The Defense Department plans to make Hack the Pentagon-style bug bounty challenges available in a new contract vehicle.
The department contracted HackerOne and Synack to create a contract vehicle that allows DoD components and services to launch such competitions to discover and remediate website vulnerabilities.
Though tech companies have long used bug-bounty programs to root out security issues, the Pentagon and the Defense Digital Service experimented with it for the first time in the spring. The numbers of Hack the Pentagon are impressive: 1,400 vetted hackers tested five websites, 138 unique vulnerabilities were found and fixed, and it cost $150,000 with about half going to pay the participants. The department said hiring a contractor for similar efforts would have cost about $1 million.
Keep reading this article at: http://www.nextgov.com/defense/2016/10/dod-wants-you-hack-pentagon-again-and-again/132539