NIST Cybersecurity and Privacy Support Services (CAPSS)
Active Master IDIQ Awarded
- Federal agency
-
National Institute of Standards and Technology
- Awardees
- 3
- Task orders
- 18
- Obligated
- $21,906,466
Vehicle facts
- Opportunity
-
- NIST Cybersecurity and Privacy Support Services (CAPSS) Pre-Solicitation · 1333ND23QNB770030 · Posted Mar 25, 2021
- Agency
-
- National Institute of Standards and Technology Department of Commerce
- Combined task order value
-
- $21,906,466 Current, with exercised options
- $29,867,468 Potential, with all options
- Last date to order 58% complete
- Shared ceiling 18% used
- $125,000,000.00
IDV award and task order details come from SAM.gov/FPDS.
About this vehicle
The National Institute of Standards and Technology (NIST) established a Master IDIQ for cybersecurity and privacy support services on December 1, 2023, with ordering authority extending through November 30, 2028, leaving approximately 2 years and 4 months for new task-order placement. The vehicle is structured as a small-business set-aside at the task-order level rather than the vehicle level, with half of the 16 awarded orders designated for total small business and half unrestricted. NIST is the sole customer.
Ordering momentum has declined noticeably: the vehicle averaged 5.3 orders per year in 2024, 5 orders in 2025, and has issued only 3 orders year-to-date in 2026 as of early August. Combined potential value across all task orders stands at $28.1 million, with $20.6 million (74 percent) obligated to date, leaving $7.5 million in unobligated ceiling available. The most recent task order awarded August 3, 2026 carried a ceiling of $429,682.68 for cybersecurity framework and risk management program technical services.
Three firms share the entirety of awarded task orders. Electrosoft Services, LLC dominates by order count with 8 awards totaling $12.9 million in combined potential value. Tharros Defense, Inc. holds 4 orders with $10.3 million combined potential value, and Cyberesi Consulting Group Inc. holds 4 orders with $4.9 million combined potential value. The work actually contracted spans standards development, cryptographic validation program support, common platform enumeration, IoT and AI cybersecurity guidance, digital identity program support, cybersecurity analysis, privacy engineering, and frontier AI model security evaluation. Task orders employ both firm fixed-price and labor-hour pricing; typical ceilings range from roughly $400,000 to $5.7 million, with performance periods typically spanning 12 to 36 months. All work is performed for NIST's Cybersecurity and Privacy Support office.
Description
Technical expertise and consultation in areas such as standards development, research, outreach, program operations, and reporting to support NIST's mission of providing cybersecurity tools and practices to protect national information systems.
IDV awards
Latest task orders
Show all 18
Top awardees by obligations
| Rank | Awardee | Obligated | Share |
|---|---|---|---|
| 1 | Electrosoft Services, LLC | $8,708,344 | 40% |
| 2 | Tharros Defense, Inc. | $8,530,235 | 39% |
| 3 | Cyberesi Consulting Group Inc. | $4,667,887 | 21% |
Top funding agencies by obligations
| Rank | Funding agency | Obligated | Share |
|---|---|---|---|
| 1 | Department of Commerce | $21,906,466 | 100% |
Obligations by fiscal year
| Fiscal year | Obligated |
|---|---|
| FY2026 | $7,903,442 |
| FY2025 | $8,789,746 |
| FY2024 | $4,777,381 |
Quick answers
What is the CAPSS contract vehicle?
NIST Cybersecurity and Privacy Support Services (CAPSS) is an indefinite delivery, indefinite quantity (IDIQ) contract vehicle run by National Institute of Standards and Technology (Department of Commerce), awarded on December 1, 2023.
Which companies hold CAPSS?
3 companies hold CAPSS's IDV awards, one each. The latest went to Cyberesi Consulting Group Inc. on December 1, 2023. The awardees whose task orders obligated the most are Electrosoft Services, LLC, Tharros Defense, Inc. and Cyberesi Consulting Group Inc.
How much has been spent through CAPSS?
18 task orders have been placed under CAPSS, obligating $21,906,466.
What is the shared ceiling of CAPSS?
CAPSS's shared ceiling is $125,000,000; its task orders have used 18% of it.
Which agencies use CAPSS the most?
The departments whose task orders under CAPSS obligated the most are Department of Commerce ($21,906,466).
How much was obligated through CAPSS in fiscal year 2025?
Task orders under CAPSS obligated $8,789,746 in fiscal year 2025.
On GovTribe
See this vehicle's full record
- Every IDV award and task order
- Funding by agency, awardee, NAICS and set-aside
- Teaming partners on this vehicle
- Ask GovTribe AI about this vehicle