MAS - Ntrty, LLC - 47QTCA19D0079

GENERAL SERVICES ADMINISTRATION

Federal Supply Service Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is: http://www.GSAAdvantage.gov.

Multiple Award Schedule (MAS)

Federal Supply Group: Information Technology Subcategory: IT Services

Contract Number: 47QTCA19D0079

For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at http://www.gsa.gov/schedules-ordering

Contract Period: March 6, 2019 to March 5, 2024

Business Size: Woman Owned Small Business

CUSTOMER INFORMATION:

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See price list on page 4.

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. See pages 5-7.

2. Maximum Order: $500,000/per Order

3. Minimum Order: $100.00

4. Geographic Coverage (delivery Area): Domestic, or 48 contiguous states, Alaska, Hawaii, Puerto Rico, Washington, DC, and U.S. Territories.

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: GSA Net Prices are shown on the attached GSA pricelist. Negotiated discount has been applied and the IFF has been added.

7. Quantity discount: A 2% discount is available for orders over $500,000.00

8. Prompt payment terms: A 1% discount for agencies paying within 15 days.

9. Foreign items (list items by country of origin): None

10a. Time of Delivery (Contractor insert number of days): Specified on the Task Order

10b. Expedited Delivery. The Contractor will insert the sentence “Items available for expedited delivery are noted in this price list.” under this heading. The Contractor may use a symbol of its choosing to highlight items in its price list that have expedited delivery: Contact Contractor

10c. Overnight and 2-day delivery: Contact Contractor

10d. Urgent Requirements: Contact Contractor

11. F.O.B Points(s): Destination

12a. Ordering Address(es): Same as Contractor

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es): Same as company address

14. Warranty provision.: Contractor’s standard commercial warranty.

15. Export Packing Charges (if applicable): N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable). N/A

17. Terms and conditions of installation (if applicable): N/A

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

18b. Terms and conditions for any other services (if applicable): N/A

19. List of service and distribution points (if applicable): N/A

20. List of participating dealers (if applicable): N/A

21. Preventive maintenance (if applicable): N/A

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants): N/A

22b. If applicable, indicate that Section 508 compliance information is not available N/A per I-FSS-600.

23. Unique Entity Identification (UEI): PCTYRXNHENL3

24. Notification regarding registration in System of Award Management (SAM) database: NTRTY LLC is actively registered in the SAM database.

APPROVED PRICING FOR SIN 54151HACS

March 6, 2019 to March 5 2020

GSA Rate/Hour March 6, 2020 to March 5, 2021

GSA Rate/Hour March 6, 2021 to March 5, 2022

GSA Rate/Hour March 6, 2022 to March 5, 2023

GSA Rate/Hour March 6, 2023 to March 5, 2024

2. Subject Matter Expert – Web Application Penetration Testing

$191.82

$196.62

$201.53

$206.57

$211.74

3. Subject Matter Expert – Database Penetration Testing

$191.82

$196.82

$201.53

$206.57

$211.74

4. Technology Analyst – Penetration Tester

$181.91

$186.46

$191.12

$195.90

$200.80

5. Technology Analyst – Information Systems Security Officer

$181.91

$186.46

$191.12

$195.90

$200.80

6. Application Systems Analyst - Code Reviewer

$172.03

$176.33

$180.74

$185.26

$189.89

Document Revision Date: 04/19/2023 (MAS Solicitation Refresh # 15 (R15)

LABOR CATEGORY DESCRIPTIONS SIN 54151HACS

"Due to the availability or limitation of education, occasionally substitution of experience as referenced below for a professional labor type with additional years of experience will be provided per the approval of the federal agency acquiring the service."

1. Program Manager Minimum level of experience - Three (3) years in every increasing levels of responsibility in cyber security projects Functional Description - Oversees all aspects of the cyber security project(s), leading a team on projects or a significant segment of large and complex projects. Analyze new and complex project-related problems and create innovative solutions that normally involve the schedule, technology, methodology, tools, solution components, and financial management of the project. Provide applications systems analysis and long and short-range plans for application selection, systems development, systems maintenance, and production activities for necessary support resources.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience. PMP and CISSP desired.

2. Subject Matter Expert – Web Application Penetration Testing Minimum level of experience - Three (3) years in cyber security projects focusing on testing web application for vulnerabilities.

Functional Description - Provides technical knowledge and analysis of highly specialized applications and operational environment. Conducts web penetration testing to determine if the systems are susceptible to hacking by outside users. Conducts high-level functional systems analysis, design, integration, documentation and implementation advice on highly complex problems relating to cyber security that require an appropriate level of knowledge of the subject matter for effective implementation. Apply principles, methods and knowledge of cyber security to specific task order requirements, advanced principles and methods to difficult and/or narrowly defined technical problems in cyber security. Assist other senior consultants with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in related domains. Intimate knowledge of common web application vulnerabilities as outlined in OWASP Top 10.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience. One or more of the following certifications is desired: CISSP, OCP, CISA, GWAPT, CEH, or OSCP.

3. Subject Matter Expert – Database Penetration Testing Minimum level of experience - Three (3) years in cyber security projects focusing on testing web application for vulnerabilities.

Functional Description - Provides technical knowledge and analysis of highly specialized applications and operational environment. Conducts database penetration testing to determine if the database systems are susceptible to hacking by outside users. Conducts high-level functional systems analysis, design, integration, documentation and implementation advice on highly complex problems relating to cyber security that require an appropriate level of knowledge of the subject matter for effective implementation. Apply principles, methods and knowledge of cyber security to specific task order requirements, advanced principles and methods to difficult and/or narrowly defined technical problems in cyber security. Assist other senior consultants with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in related domains. Intimate knowledge of common database vulnerabilities as outlined in DISA STIG files.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience. One or more of the following certifications is desired: CISSP, OCP, CISA, CEH, or OSCP.

4. Technology Analyst – Penetration Tester Minimum level of experience – Two (2) years in cyber security projects focusing on testing web application for vulnerabilities.

Functional Description – Supports testing, test plan development, project management, contract administration, audit and other assessment functions throughout the engagement. Performs supporting business functions and content development to support any other team members working on the project. Records the results of a penetration test and documents recommendations to improve the security of the applications. Understanding of full scope testing methodologies, including: enumeration, exploitation, evasion, pivoting, targeting, exfiltration.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience. One or more of the following certifications is desired: CISSP, OCP, CISA, GWAPT, CEH, or OSCP.

5. Technology Analyst – Information Systems Security Officer Minimum level of experience – Two (2) years in cyber security projects focusing working on IT systems and internal vulnerabilities.

Functional Description – Supports testing, test plan development, project management, contract administration, audit and other assessment functions throughout the engagement. Works with system personnel to assess the security posture of the network and reports control failures, including: poor security practice, misconfigurations, patch management process. Reports on security incidents and supports business functions/content development to support any other team members working on the project. Records the results of evaluations and documents recommendations to improve the security of the applications in GRC tool or designated repositories.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience. CISSP, CISA or CEH is desired.

6. Application Systems Analyst - Code Reviewer Minimum level of experience – Three (3) years in cyber security projects focusing evaluation and processing computer code.

Functional Description – Serves as a niche Cybersecurity resource on testing teams. Analyzes data and systems architecture, creates designs, and implements information systems solutions. Looks for code vulnerabilities like buffer overflows, backdoors, or malicious code. Intimately familiar with the OWASP Top 10 evaluation process. Provides SME-level support for proposed fix actions and mitigation strategies. Assists project team in meeting program objectives timely and effectively. Assumes responsibility for process documentation and technical soundness.

Minimum education - Bachelor’s degree in computer sciences or information technology or relevant work experience One or more of the following certifications is desired: CISSP, CISA, OCP, GWAPT, OSCE, OSCP, GSSP-JAVA.

This page has been left blank image1.png