Cisa vulnerability disclosure platform VDP

Active Definitive Contract Awarded Last action

Contract number
47QFRA20C0012
Awardee
Awarding agency
Obligated
$8,657,497

Award facts

Opportunity
Contract value 26% obligated
  • $20,438,452.16 Current, with exercised options
  • $33,351,282.16 Potential, with all options
Completion date 68% complete
  • Current, with exercised options
  • Potential, with all options
Funding agency
Cybersecurity and Infrastructure Security Agency Department of Homeland Security
Set-aside
Total Small Business
Competition
Full and Open Competition after exclusion of sources · 5 offers Negotiated Proposal / Quote
Pricing
Firm Fixed Price
Place of performance
Arlington, VA 22209, USA
Legislative mandates
  • Other statutory authority

Award details come from SAM.gov/FPDS.

Transactions

Action Obligated Date
Other Administrative Action P00052 $0
Other Administrative Action P00051 $1,027,500
Other Administrative Action P00050 · Migrated ID08200031 cisa vulnerability disclosure platform VDP: modification to exercise optional clin, realign ceiling, realign funding, and incorporate… $0
Other Administrative Action P00049 · Migrated ID08200031 cisa vulnerability disclosure platform VDP (administrative modification to revise GSA fee structure) $0
Exercise an Option P00048 · Migrated ID08200031 cisa vulnerability disclosure platform VDP (modification to extend contract) $2,600,000
Supplemental Agreement for work within scope P00047 $20,870
Exercise an Option P00046 $95,443
Funding Only Action P00045 · Cisa vulnerability disclosure platform VDP: bilateral modification to fund clin 4002. $11,482
Funding Only Action P00044 · Cisa vulnerability disclosure platform VDP: modification to incrementally fund clin 5003 $342,500
Supplemental Agreement for work within scope P00043 · Cisa vulnerability disclosure platform VDP: incrementally fund clin 5003 $0
Exercise an Option P00042 $321,668
Supplemental Agreement for work within scope P00041 · Cisa vulnerability disclosure platform VDP: bilateral modification to incorporate revised price schedule dated 22SEPT25 and revised attch a fceb agencies list. $0
Funding Only Action P00040 · Cisa vulnerability disclosure platform VDP: modification to incrementally fund clins 4002 and 4003 $121,778
Supplemental Agreement for work within scope P00039 · Migrated ID08200031 cisa vulnerability disclosure platform VDP: incorporate CD 2025-04 and 2025-05, DE-OB funds from clin 3002 and incrementally fund clin 4002 $0
Exercise an Option P00038 $85,700
Other Administrative Action P00037 · Cisa vulnerability disclosure platform VDP: incrementally fund clin 4002, DE-obligate funds from 3003, incorporate revised PWS 20FEB25, incorporate attachment a… $165,588
Other Administrative Action P00036 · Cisa vulnerability disclosure platform VDP: incrementally fund clin 3002 (subclin 3002AD). $5,994
Exercise an Option P00035 · Cisa vulnerability disclosure platform VDP: exercise and incrementally fund OY4. $574,704
Other Administrative Action P00034 · Cisa vulnerability disclosure platform VDP: incrementally fund clin 3002 $54,978
Other Administrative Action P00033 · Apply funding for BUG bounty. $100,000
Other Administrative Action P00032 · Contract transfer $0
Other Administrative Action P00031 · Migrated ID08200031 cisa vulnerability disclosure platform VDP administrative clause addition $0
Supplemental Agreement for work within scope P00030 $50,000
Supplemental Agreement for work within scope P00029 $50,000
Supplemental Agreement for work within scope P00028 · Migrated ID08200031 cisa vulnerability disclosure platform VDP funding $198,170
Funding Only Action P00027 $189,973
Supplemental Agreement for work within scope P00026 $93,700
Funding Only Action P00025 -$268,505
Funding Only Action P00024 -$189,359
Supplemental Agreement for work within scope P00023 $14,294
Other Administrative Action P00022 $0
Supplemental Agreement for work within scope P00021 $395,661
Supplemental Agreement for work within scope P00020 $100,000
Other Administrative Action P00019 $186,126
Other Administrative Action P00018 · Migrated ID08200031 cisa vulnerability disclosure platform VDP $0
Other Administrative Action P00017 · Migrated ID08200031 cisa vulnerability disclosure platform VDP update attachment a $0
Exercise an Option P00016 · Migrated ID08200031 cisa vulnerability disclosure platform VDP option year 2 exercise $410,143
Other Administrative Action P00015 · Migrated ID08200031 cisa vulnerability disclosure platform VDP update attachment a $0
Funding Only Action P00014 · Migrated ID08200031 cisa vulnerability disclosure platform VDP funds realignment and additional funding. $687,404
Other Administrative Action P00013 · Migrated ID08200031 cisa vulnerability disclosure platform VDP realignment of subclins based on quantity pricing. $0
Other Administrative Action P00012 · Migrated ID08200031 cisa vulnerability disclosure platform VDP administrative update to performance work statement attachment a. $0
Funding Only Action P00011 · Migrated ID08200031 cisa vulnerability disclosure platform VDP increase to subclin t & m ceiling and additional funding. $165,563
Funding Only Action P00010 · Migrated ID08200031 cisa vulnerability disclosure platform VDP DE-obligation of funds -$776,573
Other Administrative Action P00009 · Migrated ID08200031 cisa vulnerability disclosure platform VDP administrative changes $0
Exercise an Option P00008 · Migrated ID08200031 cisa vulnerability disclosure platform VDP option year 1 exercise $621,522
Funding Only Action P00007 · Migrated ID08200031 cisa vulnerability disclosure platform VDP funding and administrative $200,000
Other Administrative Action P00006 $0
Other Administrative Action P00005 · Migrated ID08200031 cisa vulnerability disclosure platform VDP updates to attachment a to the performance work statement and other administrative changes. $0
Funding Only Action P00004 · Migrated ID08200031 cisa vulnerability disclosure platform VDP deobligation and reduction of subclin 0003AA. -$315,534
Funding Only Action P00003 · Migrated ID08200031 cisa vulnerability disclosure platform VDP activate BUG bounty for cisa and obligate funds to support. $485,437
Show 40 more

Latest 50 listed here. See the rest on GovTribe.

About this award

Written by GovTribe AI ·

The Cybersecurity and Infrastructure Security Agency awarded a definitive contract to Endyna, Inc., a woman-owned small disadvantaged business, for the CISA Vulnerability Disclosure Platform on February 3, 2021, under a total small business set-aside. The contract carries a ceiling value of $33.4 million and a firm fixed price, with performance through July 2, 2029.

Place of performance is Arlington, VA. The originating solicitation seeks migration and modification of the VDP, including revision to the Performance Work Statement and price schedule.

As of FY2025, the contract invoiced $1 million across 4.0 FTEs and 8,368 contractor hours. The derived government-paid blended rate in FY2025 was $123.15 per hour. Endyna reported one subcontractor performing 19 percent of contractor hours in FY2025. Across the contract's five-year reporting history, labor intensity and invoicing have risen: FY2021 through FY2025 show a trend from 0.9 FTEs and $121 thousand to 4.0 FTEs and $1 million annually, with hourly rates averaging $123–$347 per hour in years of peak utilization.

Quick answers

Who was awarded contract 47QFRA20C0012?

47QFRA20C0012 was awarded to Endyna, Inc. by Assisted Acquisition Services Region 8 (Assisted Acquisition Services) on February 3, 2021.

How much is contract 47QFRA20C0012 worth?

The government has obligated $8,657,497 on 47QFRA20C0012. Its current value, with exercised options, is $20,438,452. Its potential value, with all options, is $33,351,282.

Which agency awarded contract 47QFRA20C0012?

Assisted Acquisition Services Region 8 (Assisted Acquisition Services) awarded 47QFRA20C0012, with funding from Cybersecurity and Infrastructure Security Agency (Department of Homeland Security).

Was contract 47QFRA20C0012 competed?

The extent of competition for 47QFRA20C0012 was full and open competition after exclusion of sources. The government received 5 offers. It was set aside: Total Small Business.

On GovTribe

See this award's full record

  • Every transaction and funding action
  • The awardee's other awards and teaming partners
  • Similar awards and recompete opportunities
  • Ask GovTribe AI about this award
Try for free Login