High-tech hackers brought in by the Pentagon to breach US Defense Department websites have been able to burrow in and find 138 security gaps, Defense Secretary Ash Carter says.
The so-called white-hat hackers were turned loose on five public Pentagon internet pages and were offered bounties if they could find unique vulnerabilities.
The Pentagon says 1410 hackers participated in the challenge and the first gap was identified just 13 minutes after the hunt began.
Overall, they found 1189 vulnerabilities, but a review by the Pentagon determined that only 138 were valid and unique.
The experiment cost $US150,000 ($A202,980). Of that, about half was paid to the hackers as bounties, including one who received the maximum prize of $US15,000 for submitting several security gaps. Others received varying amounts, down to $US100.
News that makes sense
Your trusted source for staying up-to-date with the world around you. Get free daily news updates and analysis, straight to your inbox.
"These are ones we weren't aware of, and now we have the opportunity to fix them. And again, it's a lot better than either hiring somebody to do that for you, or finding out the hard way," said Carter.
The Pentagon said it was the first time the federal government had undertaken a program with outsiders trying to breach the networks. Large companies have done similar things.
Called "Hack the Pentagon", the program will be followed by a series of initiatives, including a process that will allow anyone who finds a security gap in Defense Department systems to report it without fear of prosecution. The department will also expand the bounty program to the military services and encourage contractors to allow similar scrutiny.
