Justification and Approval - Vulnerability Disclosure Policy Platform (VDP) Platform

Notice ID:47QFRA20Q0048

This opportunity involves providing a secure, commercially available SaaS Vulnerability Disclosure Policy (VDP) platform for the Cybersecurity and Infrastructure Security Agency (CISA) to support Federal Civilian Executive Branch agencies. The contractor must configure, operate, and administer the platform, maintain its Authority to Operate, provide technical support, perform vulnerability triage and tracking, and optionally support bug bounty programs. The platform must enable centralized submission, validation, routing, and reporting of cybersecurity vulnerabilities while ensuring secure collaboration and scalability. The contract modification extends the period of performance to ensure continuity of the enterprise VDP platform and support services. No specific budget amounts or performance location are mentioned.

Department/Ind.Agency Subtier Office
GENERAL SERVICES ADMINISTRATION FEDERAL ACQUISITION SERVICE GSA GAS AAS REGION 6
  PSC   DJ01 IT and Telecom - Security and Compliance Support Services (Labor)
LOCATION: Not Given
Primary Contact
Adrienne Davis
Not Given
Alt Contact
Matthew Schupbach
Not Given


Data sourced from SAM.gov. View Official Posting »