Vulnerability Disclosure Program (VDP) Enterprise Management System (EMS)

1/12/26 - Ammendment 2 - The purpose of this amendment is to provide an updated version of the questions and answers from the RFP via the document titled "VDP EMS - RFP Questions and Answers_Rev1" and to provide an updated version of the PWS titled "Attachment 1 VDP EMS Performance Work Statement (PWS)_Rev1."

1/6/26 - Amendment 1 - The purpose of this amendment is to provide the questions and answers from the RFP. via the document titled "VDP EMS - RFP Questions and Answers" and provide an updated PWS titled "PWS VDP EMS_12Jan2026."

The Department of Defense Cyber Crime Center (DC3) is seeking a commercial enterprise management system (VDP EMS) to support its Vulnerability Disclosure Programs. Key requirements include vulnerability submission workflows, researcher engagement tools, and advanced reporting capabilities for both the DoD VDP and DIB VDP. This acquisition covers annual licenses, subscriptions, and support. See the attached Performance Work Statement (PWS).

Questions are due January 2, 2026 1600 EST Please note: Funds are not presently available for this contract. The Government’s obligation under this contract is contingent upon the availability of appropriated funds from which payment for contract purposes can be made.

No legal liability on the part of the Government for any payment may arise until funds are made available to the Contracting Officer for this contract and until the Contractor receives notice of such availability, to be confirmed in writing by the Contracting Officer.