Justification and Approval - Vulnerability Disclosure Policy Platform (VDP) Platform
Awarded on September 25, 2020. Justification posted by GENERAL SERVICES ADMINISTRATION (FEDERAL ACQUISITION SERVICE) on July 16, 2026. Solicitation 47QFRA20Q0048.
NAICS 541519 (Other Computer Related Services). Place of performance: Arlington, Virginia. Full description on SAM.gov.
Description
The Cybersecurity and Infrastructure Security Agency (CISA) partners with Federal agencies, industry, and other stakeholders to strengthen the security and resilience of the Nation's critical infrastructure and Federal information systems. As part of this mission, CISA supports ongoing efforts to reduce cybersecurity risk by identifying, assessing, and facilitating the remediation of vulnerabilities affecting Federal Civilian Executive Branch (FCEB) systems. These efforts support the implementation of Binding Operational Directive (BOD) 20-01, which requires FCEB agencies to establish and maintain Vulnerability Disclosure Policies (VDPs) to receive and address vulnerability reports submitted by external security researchers.
This requirement provides CISA and participating FCEB agencies with continued access to a secure, commercially available Software-as-a-Service (SaaS) Vulnerability Disclosure Policy (VDP) platform that enables the centralized submission, validation, routing, tracking, and reporting of cybersecurity vulnerabilities identified in internet-accessible Federal systems. The platform supports secure collaboration between security researchers and participating agencies, provides configurable reporting and metrics, role-based user management, application programming interface (API) integration capabilities, and optional functionality to support agency-managed bug bounty programs.
The contractor shall configure, operate, secure, and administer the platform; maintain the platform's Authority to Operate (ATO) and support applicable Federal cybersecurity authorization requirements; provide technical support and user onboarding; perform vulnerability triage, validation, routing, and tracking services; generate operational reporting; and support agencies that elect to implement bug bounty programs. The platform is designed to scale as agency participation changes while ensuring the confidentiality, integrity, and availability of vulnerability information and supporting the Government's continued ability to receive and manage coordinated vulnerability disclosures.
This modification extends the period of performance for the existing contract to ensure continuity of the enterprise Vulnerability Disclosure Policy (VDP) platform and associated support services. The modification continues uninterrupted support for participating Federal Civilian Executive Branch agencies and maintains the Government's capability to receive, triage, track, and manage vulnerability disclosures during the transition period.
Overview
Award Overview
Award Number
47QFRA20C0012
Award Amount (SAM.gov award notice)
Not specified
Award Date
Sep 25, 2020
Awardee
Not specified
Original Solicitation
Notice ID: 9981c687df274f82add5e698356e33d4
Posted Date: Jul 16, 2026
Original Response Deadline: Not specified
Possible prior contracts
Sign in to see possible prior contracts for this requirement (matched by agency, NAICS and place of performance; not confirmed).
Contacts
Contracting Officer
Primary Contact
Secondary Contact
Documents
Showing 1 of 1 items
Document | Source | Agency | Posted Date | File Size | Actions | |
|---|---|---|---|---|---|---|
| Justification | FEDERAL ACQUISITION SERVICE | Jul 16, 2026 | 131.11 KB |
Lifecycle
47QFRA20Q0048- Awarded
This opportunity has been awarded.
- Sole Source / J&ACurrentJul 16, 2026
Justification and Approval - Vulnerability Disclosure Policy Platform (VDP) Platform
Similar Opportunities
Title | Phase | Agency | NAICS | Set Aside | Posted | Deadline | Location |
|---|---|---|---|---|---|---|---|
In alignment with the implementation of Executive Order 14240 to eliminate contract duplication and waste, we are leveraging enterprise-level contracts when applicable to meet future mission needs. The Government is not pursuing an acquisition at this time. Thank you for your interest. | Special Notice | 541519 | No Set-Aside | 10/07/2026 | 10/30/2026 | Fort Belvoir, VA | |
The instant requirement is for procurement of continued Digital Forensics Examiner Support services on behalf of the Naval Criminal Investigative Service (NCIS). The Contractor will provide complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership and access methodology, as well as security features and usage. Support will also include detailed forensic examinations for NCIS cases when computers, mobile devices, or other digital media are instruments of a crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. | Market Research | 541519 | 8(a) Set-Aside | 09/25/2026 | 10/02/2026 | Camp Pendleton, CA | |
The instant requirement is for procurement of continued Digital Forensics Examiner Support services on behalf of the Naval Criminal Investigative Service (NCIS). The Contractor will provide complex and high-profile, non-destructive evaluations of target computer systems to determine operating and file systems, stored information, user and program logs, ownership and access methodology, as well as security features and usage. Support will also include detailed forensic examinations for NCIS cases when computers, mobile devices, or other digital media are instruments of a crime, DoN computer networks are victims, or when computers or other digital media is used to store data of evidentiary or intelligence value. | Market Research | 541519 | 8(a) Set-Aside | 09/23/2026 | 10/02/2026 | Camp Pendleton, CA | |
12 month subscription licenses to the Air Enterpirse commercial Software-as-a-Service artificial Intelligence and machine learning analytics platform. | Sole Source / J&A | 541519 | No Set-Aside | 10/14/2026 | Open | Fort Lee, VA | |
RFP Number: W50NH9-27-R-A006 Requirement: Scalable Geospatial Intelligence (GEOINT) Architecture Information Technology (IT) Contractor Manpower Equivalent (CME) Support (Scalable GEOINT) for United States (U.S.) Army Intelligence and Security Command (INSCOM) (also known as Geospatial Intelligence (GEOINT) Architecture Information Technology (IT)) 1. This solicitation is issued as a Request for Proposal (RFP) via SAM.gov. Interested Offerors are requested to submit a proposal in response to this RFP. You are to submit the proposal for your company no later than 12:00 PM Eastern Standard Time (EST) on Friday, 13 November 2026. A proposal validity period of no less than 240 calendar days from the proposal due date is required. 2. The Period of Performance (PoP) for one 30-day transition-in period (which is included in the base period), one 12-month base period, four 12-month option periods in accordance with (IAW) Revolutionary Federal Acquisition Regulation (FAR) Overhaul (RFO) FAR 52.217-9, and one six-month option period IAW RFO FAR 52.217-8. The estimated award date for this contract is 11 January 2027. The type of contract for this action will be primarily Time and Material. The Government will evaluate this requirement on a Best Value Trade Off basis, as detailed in Sections L and M of this RFP, proposals are not to include any Contract Line-Item Numbers (CLINs) other than those listed in the RFP. 3. All terms, conditions, and provisions set forth in this solicitation apply to this RFP and any resulting contract award. 4. The Offeror shall submit its proposal in accordance with the instructions included in Section L of this RFP. Any questions in regard to this RFP must be submitted no later than 11:59AM EST on Tuesday, 20 October 2026 via email to Contract Specialists Richard Schmidt (richard.a.schmidt4.civ@army.mil) and Cassandra Spadina (cassandra.e.spadina.civ@army.mil) and Procurement Contracting Officer (PCO) Brent Vergauwen (brent.k.vergauwen.civ@army.mil). The Government requests Offerors submit questions in a Microsoft (MS) Excel spreadsheet and identify the RFP or attachment page and paragraph related to the question. The Government reserves the right to not respond to questions received after this date and time. 5. Prospective Offerors are cautioned that this version of the RFP, inclusive of its attachments, is the final version of this solicitation. These files differ from those previously released in draft form. 6. If there are any discrepancies between questions and answers and the RFP (to include all amendments), the language of the RFP will govern. 7. Due to the transition from Fiscal Year 2026 to Fiscal Year 2027, the solicitation number for the Pre-solicitation Notice was updated from W50NH9-26-R-A019 to W50NH9-27-R-A006. | Solicitation | 541519 | No Set-Aside | 10/14/2026 | 11/13/2026 | - |
Additional Details
Solicitation Number
47QFRA20Q0048
Archive Date
Aug 15, 2026
Office Address
KANSAS CITY, MO, 64108