Contacts, documents and full notice history are available with a subscription.
Special Notice NONE Expired 1 notice

Notice of Intent to Solicit and Award a Sole-Source Modification for the Vulnerability Disclosure Policy (VDP) Platform 47QFRA20C0012

Solicitation 47QFRA20C0012 Copied Notice ID d59a92511b5a425780abac8b05d9f368 Copied GENERAL SERVICES ADMINISTRATION — FEDERAL ACQUISITION SERVICE
SAM.gov
Posted
Jan 12, 2026
Deadline
Jan 26, 2026
Set-aside
NONE
NAICS
541519
PSC
DJ01

Summary

AI-generated · Jan 13, 2026

Modify an existing open-market contract with Endyna, Inc. to provide continued access to a secure Vulnerability Disclosure Policy (VDP) platform used by DHS CISA and partnering Federal Cybersecurity Executive Branch agencies. Endyna configures, operates, and administers the platform, maintains the Authority to Operate, provides triage to ensure validity, proper routing, and tracking of vulnerability submissions, and runs a bug-bounty incentive program to reward valid submissions.

This is a sole-source modification intended to prevent a break in critical services while the government competitively procures future VDP requirements and implements a new procurement strategy. Although not a competitive solicitation, firms that can immediately deliver these services may indicate interest and capabilities; the government will consider all responses.

The U.S. General Services Administration, Federal Acquisition Service, hereby publicises its intention to modify an existing open market contract with Endyna, Inc., located at 1345 Lancia Drive, McLean VA, 22102. The anticipated modification will provide the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and partnering Federal Cybersecurity Executive Branch (FCEB) agencies continued access to a secure platform to facilitate the submission, tracking, and reporting of vulnerabilities discovered in information systems. The contractor, EnDyna, configures, operates, and administers the platform; ensures it maintains an Authority to Operate (ATO); provides triage services to ensure the validity, proper routing, and tracking of vulnerability submissions; and facilities a bug bounty incentive payment program for FCEB agencies to reward valid submissions. EnDyna is the only firm currently able to continue to provide the services and maintain the ATO without a break in these critical services. The anticipated sole-source modification will allow the Government adequate time to competitively procure future VDP program requirements and implement a new procurement strategy. Be advised that the aforementioned information is anticipatory in nature and is not binding. A determination by the Government not to compete based upon responses to this notice is solely within the discretion of the Government. This notice is not a request for competitive proposals; however, any firm believing that it can fulfill the requirement of providing these services may be considered on the following competitive procurement. Interested parties may identify their interest and capabilities in response to this notice, and must clearly show the firm's ability to be immediately responsive without compromising the quality, accuracy, and reliability of services provided. The Government will consider all responses.

From Special Notice posted on Jan 12, 2026

Notice history

1
  1. Special Notice LATEST Posted Jan 12, 2026

Details

Solicitation number 47QFRA20C0012
Notice ID d59a92511b5a425780abac8b05d9f368
Notice type Special Notice
Product / Service (PSC) DJ01
NAICS 541519
Set-aside No Set aside used
Place of performance Mc Lean, Virginia
Archive date Jan 27, 2026

Award Information

Not yet awarded

Documents

No files available

View on SAM.gov

Contacts

primary
Lila Schmideke

Email

secondary
Matthew Schupbach

Email

Agency

GENERAL SERVICES ADMINISTRATION
FEDERAL ACQUISITION SERVICE

Place of Performance

Mc Lean, Virginia 22102
USA

Dates

Posted Jan 12, 2026 6 months ago
Last Updated Aug 06, 2026 2 days ago
Due Jan 26, 2026 6 months ago