Nucleus Vulnerability Management
Past New Requirement Updated
- Solicitation expected
- Estimated value
- $250,000 to $499,000
- Set-aside
- Total Small Business
Forecast facts
- Anticipated award
- Through
- NAICS code
- 513210 Software Publishers
- Place of performance
- Washington, DC
- Forecast number
- 50990
- Points of contact
-
- Denelle Agosto denelle.agosto@gsa.gov (609) 605-7866
Forecast details come from the GSA Acquisition Gateway. Agencies' dates and values are estimates.
About this forecast
The General Services Administration is procuring the Nucleus Security unified vulnerability and exposure management platform as a delivery order under a total small business set-aside, with solicitation release estimated for September 16, 2026 and award targeted for September 30, 2026. The platform will consolidate vulnerability data from over 200 native scanners across infrastructure, application, and cloud environments, automating data deduplication, enrichment via exploit intelligence, and dynamic risk scoring to enable transition from passive scanning to accelerated remediation and Continuous Threat Exposure Management.
The estimated award value ranges from $250,000 to $499,000 under a Firm Fixed Price contract with a one-year period of performance from September 30, 2026 through September 29, 2027. Performance takes place in Washington, DC. Denelle Agosto, Contracting Officer's Representative at GSA, serves as the point of contact and may be reached at denelle.agosto@gsa.gov or 609-605-7866.
Forecast text
Modern enterprise security environments generate highly fragmented data across numerous disjointed scanning tools. To streamline operations, GSA SecOps requires the procurement of the Nucleus Security unified vulnerability and exposure management platform. Nucleus unifies the agency's security stack by aggregating, normalizing, and correlating vulnerability data from over 200 native out-of-the-box infrastructure, application (AppSec), and cloud scanners.The platform automates data deduplication, enriches findings using real-world exploit intelligence via Nucleus Insights, and calculates dynamic risk scores tailored to internal corporate asset criticality. This deployment will enable GSA to successfully transition from passive vulnerability scanning to accelerated, automated remediation routing and Continuous Threat Exposure Management (CTEM).
Core Platform Capabilities:
- Data Ingestion & Tool Consolidation: Seamlessly connects to existing SAST, DAST, SCA, and cloud scanners using native API connectors without requiring custom scripts.
- Vulnerability Prioritization: Utilizes the proprietary Nucleus Threat Rating (NTR) alongside embedded threat intelligence to instantly isolate weaponized CVEs.
- Workflow Automation: Orchestrates automated ticket-routing rules that sync directly with enterprise IT service systems like Jira and ServiceNow.
- Nucleus Query Language (NQL): Employs unified querying syntax to filter assets, individual findings, and live vulnerability collections in real-time.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast