Coordinated Vulnerability Disclosure (CVD) Support
Forecast Recompete Updated
- Solicitation expected
- Estimated value
- $20,000,000 to $50,000,000
- Set-aside
- Competitive 8(a)
Forecast facts
- Anticipated award
- Through
- Acquisition strategy
- Follow-on to Existing Contract
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Arlington, VA
- Forecast number
- F2026075286
- Points of contact
-
- Hannah Moussa cisaapfsvendorinquiries@cisa.dhs.gov (202) 568-4157
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) is recompeting a Coordinated Vulnerability Disclosure Support contract under the competitive 8(a) STARS III vehicle, with solicitation release targeted for March 31, 2027 and award anticipated September 28, 2027. CISA's Cybersecurity Division seeks subject-matter expert analytic and operational staff resources to enhance vulnerability analysis portfolio coverage, support secure-by-design and secure-by-default activities across the cyber supply chain, and provide new and enhanced capabilities for the Disclosure branch's vulnerability response and disclosure mission.
The award value is estimated between $20 million and $50 million for a one-year period of performance from September 28, 2027 through September 27, 2028, with work performed in Arlington County, Virginia. Inquiries should be directed to the CISA APFS Vendor Inquiries mailbox at cisaapfsvendorinquiries@cisa.dhs.gov or (202) 794-8527; the requirements contact is Michael Ashworth at (202) 286-5737, with Jennifer Burbage as alternate contact at (202) 935-6138.
Forecast text
The overall objective is to obtain SME analytic and operational staff resources that will enable CISA's Cybersecurity Division (CSD) Vulnerability Management (VM) to enhance and provide broader expert coverage across its entire vulnerability analysis portfolio, integrating directly with VM’s Disclosure branch personnel. Additionally, VM requires Contractor support to engage more directly in secure by design/default activities to push long-term CISA goals to reduce risk within the entire cyber supply chain. Finally, VM requires support to provide both new and enhanced capabilities that will advance the Disclosure branch’s primary goals of vulnerability response and disclosure.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast