Vulnerability Disclosure Program

This contract calls for the procurement of a comprehensive vulnerability disclosure program, including a software platform and associated services. The solution must provide a community‑accessible portal for security researchers, embedded reporting mechanisms, unlimited triage and validation by experts, program‑setup assistance, integration with the agency’s software development lifecycle, advanced reporting, and ongoing support throughout a one‑year term. • Platform with external researcher community access • Unlimited triage, validation, and support from security experts • SDLC integration, advanced analytics, and continuous program health monitoring • One‑year contract with no renewal terms disclosed