DHS is planning to award upwards of four contracts to help expand its bug bounty software vulnerability program.