Coordinated Vulnerability Disclosure (CVD) Support

The overall objective is to obtain SME analytic and operational staff resources that will enable CISA's Cybersecurity Division (CSD) Vulnerability Management (VM) to enhance and provide broader expert coverage across its entire vulnerability analysis portfolio, integrating directly with VM’s Disclosure branch personnel. Additionally, VM requires Contractor support to engage more directly in secure by design/default activities to push long-term CISA goals to reduce risk within the entire cyber supply chain. Finally, VM requires support to provide both new and enhanced capabilities that will advance the Disclosure branch’s primary goals of vulnerability response and disclosure.

Estimated value

$20M to $50M

Award quarter

Q4 2027

Est. solicitation date

Mar 31, 2027

Anticipated award

Sep 28, 2027

Contract vehicle

8(a) STARS III

Contract type

Unknown/To Be Determined

Competition

Follow-on to Existing Contract

Status

REC

Fiscal year

2027

Period of performance

Sep 28, 2027 – Sep 27, 2028

• NAICS541519
• PSC541519