Vulnerability Disclosure Program Enterprise Management System (Updated)

The Department of Defense Cyber Crime Center (DC3) seeks a commercial enterprise management system (VDP EMS) to support its Vulnerability Disclosure Programs, including vulnerability submission workflows, researcher engagement tools, and advanced reporting for DoD VDP and DIB VDP. The acquisition includes annual licenses, subscriptions, and support services as detailed in the Performance Work Statement (PWS). Questions are due January 2, 2026, with funds availability contingent on appropriated funds.