Notice of Intent to Solicit and Award a Sole-Source Modification for the Vulnerability Disclosure Policy (VDP) Platform

The U.S. General Services Administration, Federal Acquisition Service, intends to modify an existing open market contract with Endyna, Inc. to provide continued access to a secure platform for the submission, tracking, and reporting of vulnerabilities discovered in information systems. The contractor will configure, operate, and administer the platform, ensure it maintains an Authority to Operate (ATO), provide triage services, and facilitate a bug bounty incentive payment program. Interested parties may identify their interest and capabilities in response to this notice. Key aspects of the job include: • Providing a secure platform for vulnerability disclosure • Configuring, operating, and administering the platform • Ensuring the platform maintains an Authority to Operate (ATO) • Providing triage services for vulnerability submissions • Facilitating a bug bounty incentive payment program