Providing Treasury Enterprise Cybersecurity Technology (PROTECTS)
Active Master BPA Awarded
- Federal agency
-
Internal Revenue Service
+ 1 more agency
- Awardees
- 10
- Task orders
- 3
- Obligated
- $36,435,377
Vehicle facts
- Opportunity
-
- Draft RFQ protects Pre-Solicitation · 2032H524Q00009 · Posted Jan 12, 2024
- Agencies
-
- Internal Revenue Service Department of the Treasury
- Departmental Offices Department of the Treasury
- Combined task order value
-
- $38,787,482 Current, with exercised options
- $151,464,165 Potential, with all options
- Last date to order 22% complete
- Shared ceiling <1% used
- $20,000,000,000.00
IDV award and task order details come from SAM.gov/FPDS.
About this vehicle
The Department of the Treasury Departmental Offices established this Master BPA for Treasury enterprise cybersecurity technology and services on January 17, 2025, with ordering authority extending through January 16, 2033. All three awarded task orders carry Total Small Business set-asides, making this vehicle fully reserved for small business across current activity.
Ordering remains active with six years five months of remaining procurement authority. Three task orders have been awarded since July 2025, generating $136.7 million in combined potential value against a $20 billion shared ceiling. Year-to-date velocity reached three orders in 2025; current obligation stands at $22 million, or 16 percent of combined potential value. The vehicle succeeds an earlier RFQ effort (incumbent contractor 1662363) and the underlying scope encompasses security operations center support, vulnerability management, threat intelligence analysis, incident response, security engineering, and knowledge transfer across Treasury infrastructure.
Competition is narrow. Shorepoint LLC holds two orders totaling $101 million in potential value, while Pueo Business Solutions LLC holds one order worth $35.7 million. These two firms account for 100 percent of awarded task orders. Task-order values range from $10.2 million to $90.8 million ceiling, with typical duration of approximately eight years. The largest single order—Treasury Shared Services Security Operations Center (TSSOC)—went to Shorepoint with a $90.8 million ceiling and obligated $11.3 million as of the September 2025 award.
Customer base is concentrated within Treasury itself. Treasury Departmental Offices placed two orders valued at $126.5 million combined potential, while the Treasury Bureau of Engraving and Printing placed one order for $10.2 million. Pricing is firm fixed price across all three awards. Small business firms currently lack alternative pathways into this vehicle given the Total Small Business set-aside at the task-order level; unrestricted and large-business competitors are excluded from pursuit.
IDV awards
Latest task orders
| Task order | Awardee | Awarding agency | Obligated | Last action |
|---|---|---|---|---|
| Security operations center (SOC) & engineering support: technical, programmatic… | Shorepoint LLC | BEP | $6,637,154 | |
| Task order 2 treasury enterprise security incident and event management… | Pueo Business Solutions LLC | DO | $8,707,323 | |
| This is to award task order #1, treasury shared services security operations… | Shorepoint LLC | DO | $21,090,899 |
Top awardees by obligations
| Rank | Awardee | Obligated | Share |
|---|---|---|---|
| 1 | Shorepoint LLC | $27,728,055 | 76% |
| 2 | Pueo Business Solutions LLC | $8,707,322 | 24% |
Top funding agencies by obligations
| Rank | Funding agency | Obligated | Share |
|---|---|---|---|
| 1 | Department of the Treasury | $36,435,377 | 100% |
Obligations by fiscal year
| Fiscal year | Obligated |
|---|---|
| FY2026 | $14,606,657 |
| FY2025 | $21,828,720 |
Quick answers
What is the PROTECTS contract vehicle?
Providing Treasury Enterprise Cybersecurity Technology (PROTECTS) is a blanket purchase agreement (BPA) vehicle run by Internal Revenue Service (Department of the Treasury) and Departmental Offices (Department of the Treasury), awarded on January 17, 2025.
Which companies hold PROTECTS?
10 companies hold PROTECTS's IDV awards, one each. The latest went to Obsidian Global, LLC on January 17, 2025. The awardees whose task orders obligated the most are Shorepoint LLC and Pueo Business Solutions LLC.
How much has been spent through PROTECTS?
3 task orders have been placed under PROTECTS, obligating $36,435,377. Their combined current value, with exercised options, is $38,787,482.
What is the shared ceiling of PROTECTS?
PROTECTS's shared ceiling is $20,000,000,000; its task orders have used <1% of it.
Which agencies use PROTECTS the most?
The departments whose task orders under PROTECTS obligated the most are Department of the Treasury ($36,435,377).
How much was obligated through PROTECTS in fiscal year 2025?
Task orders under PROTECTS obligated $21,828,720 in fiscal year 2025.
On GovTribe
See this vehicle's full record
- Every IDV award and task order
- Funding by agency, awardee, NAICS and set-aside
- Teaming partners on this vehicle
- Ask GovTribe AI about this vehicle