Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

This Solicitation opportunity from Maryland was posted on September 18, 2025. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Bug Bounty Events

Closed
BPM052860State & Local

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519
New
SLED
CloudFirst FY 2027- ezVault & ezRecovery
Solicitation # SRC0000036603
Solicitation SRC0000036603, titled CloudFirst FY 2027- ezVault & ezRecovery, is issued by the Alabama Information Technology agency for the procurement of disaster recovery software, hardware maintenance, and additional recovery software for the fiscal year. The contract is governed by the State of Alabama and the Office of the Chief Procurement Officer, with the City of Montgomery serving as the sole venue for litigation. The total contract value is capped at a not-to-exceed limit of 25,000 dollars, which includes the original agreement and any subsequent renewals. The period of performance allows for annual renewals for a total duration of up to five years from the effective date. Prospective suppliers must submit responses electronically via the Alabama Buys portal by the deadline of November 3, 2026. Key compliance requirements include E-Verify documentation within five calendar days of notification, certification of tax compliance under Section 41-4-142 of the Code of Alabama 1975, and a disclosure statement for contracts exceeding 25,000 dollars. Award decisions may be based on cost realism and price reasonableness at the discretion of the Chief Procurement Officer. Additionally, suppliers must certify they are not currently debarred or suspended from government participation and acknowledge their status as independent suppliers not entitled to state merit system benefits.
Information Technology

POSTED

about 14 hours ago

DEADLINE

in 5 days

AI Contract Overview

Show more

The Maryland Department of Information Technology is seeking a contractor to enhance the state's cybersecurity defenses through the organization and execution of two multi-day Coordinated Vulnerability Discovery and Disclosure (CVDD) events, commonly known as bug bounty events. These events are designed to identify and address security vulnerabilities within Maryland's digital infrastructure, thereby strengthening overall cybersecurity resilience. The contract, with a value estimated between $500,000 and $1,500,000, aims to leverage external expertise to conduct comprehensive vulnerability assessments in a controlled, coordinated manner. The solicitation, titled "Bug Bounty Events," was posted on September 18, 2025, with a response deadline of October 3, 2025. The project falls under NAICS code 541519, which pertains to other computer related services, and is managed by the Maryland Department of Information Technology - Administration. Interested parties can contact Merchelle Halsey via email for further details. The initiative underscores Maryland’s commitment to proactive cybersecurity measures by engaging specialized contractors to facilitate these critical vulnerability discovery events.

Documents

4

BPM052860 Amendment #1 - Bug Bounty Events

PDF, High priority: read this firstamendment
High

BPM052860 Attachment B - Bug Bounty Price Form

XLSX, High priority: read this firstspecifications
High

BPM052860 - Bug Bounty Events

PDF, High priority: read this firstrfp
High

BPM052860 - Bug Bounty Events Sample Contract

PDF, Low prioritycontract-document
Low

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

PhaseClosed
Posted

Solicitation

Response Deadline

Deadline has passed

Submission Closed

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

Show more
AgencyMaryland Department of Information Technology - Administration
Contacts1 person available
OfficeN/A
Office AddressN/A
Contacts
Merchelle HALSEY

Full Description

Show more
A procurement to secure a contractor to support Maryland's cybersecurity posture by planning, coordinating, and executing two (2) distinct multi-day Coordinated Vulnerability Discovery and Disclosure (CVDD) events—commonly referred to as a bug bounty event—in the State of Maryland.  

Find Active Opportunities Like This

Get AI-powered intelligence on the opportunities still open

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS