SAM #36C10B26Q0482

VA Seeks Enterprise Vulnerability Management Maintenance and Support (Tenable or Equivalent)

The Department of Veterans Affairs (VA) is seeking maintenance and support for its enterprise vulnerability management program, with a focus on Tenable Security Center products or equivalent commercial solutions. - Government Buyer: - Department of Veterans Affairs (VA), Office of Information and Technology, Office of Information Security - Contracting managed by VA Technology Acquisition Center, Eatontown, NJ - OEMs Highlighted: - Tenable, Inc. (primary OEM for current products) - Products/Services Requested: - Maintenance and support for Tenable Security Center suite or equivalent - Elite Support / Premium Support (TECH-SUP-ELITE) – Qty: 1 - Tenable.SC+ with scanners, 1GB NNM annual maintenance (TSCCV-M-GS) – Qty: 1 - Standard Tenable.SC Console (TSCCV-STNDC-M-GS) – Qty: 3 - Additional Console Subscription for Tenable.sc+ Perpetual (TSCCV-AC-M-GS) – Qty: 5 - Tenable.SC Director Annual Maintenance (TSC-DIR-M-GS) – Qty: 1 - Tenable.SC Continuous View Unlimited Hosts, 1GB PVS, 5TB LCE Renewal (GS-LGT-ENTP-PVS-R) – Qty: 1 - Agents Cloud Service FedRAMP Moderate (AGT-CSP-FRM-GS) – Qty: 2 (1 renewal, 1 new) - Services include licenses, subscriptions, technical support, software updates, and transition activities - Unique/Notable Requirements: - Section 508 compliance is mandatory - Vendors must provide a Voluntary Product Accessibility Template/Accessibility Conformance Report (VPAT/ACR) and address any accessibility gaps with remediation timelines - The solution must support vulnerability scanning, compliance, endpoint visibility, and reporting at enterprise scale - Both renewals and new licenses/subscriptions are included - Period of Performance: - Base year plus four option years (annual renewals possible) - All requirements are subject to change based on market research and acquisition planning

Description

Page 12 of 12

Page 1 of 12 This is a Request for Information (RFI) only issued for the purpose of conducting market research. Accordingly, this RFI constitutes neither a Request for Quote (RFQ) nor a guarantee that one will be issued by the Government in the future; furthermore, it does not commit the Government to contract for any services described herein. Do not submit a Quote. The Department of Veterans Affairs (VA) is not, at this time, seeking proposals or quotes, and therefore, will not accept, review, or evaluate unsolicited proposals or quotes received in response hereto. This notice is not to be construed as a commitment on the part of the Government to award a contract, nor does the Government intend to pay for any information submitted as a result of this request. The Government does not reimburse respondents for any costs associated with submission of the information being requested or, reimburse expenses incurred for responses to this RFI. The information provided may be used by VA in developing its acquisition strategy and Product Description (PD). Any information submitted by respondents to this RFI is strictly voluntary; however, any information received shall become the property of the Government and will not be returned to the respondent. Interested parties are responsible for adequately marking proprietary, restricted or competition sensitive information contained in their response. This is a request for information and does not obligate the Government in any way, nor does it commit the Government to any specific course of action. The VA Technology Acquisition Center (TAC) is seeking response to develop its acquisition strategy for a proposed Firm Fixed Priced Task Order for Enterprise Vulnerability Management Maintenance and Support. See attached draft Product Description. Provide Responses to the following: A. General Company Information 1. Include the following identification information a. Company Name b. CAGE/DUNS Number under which the company is registered in SAM/VetBiz.gov c. Company Address d. Point of contact name e. Telephone number f. Email address g. GWAC Contract Number if any h. Socio-economic size under NAICS Code 541519. For Service Disabled Veteran Owned Small Business (SDVOSB) or Veteran Owned Small Business (VOSB) concerns, advise if you are currently certified in the Vendor Information Pages Database (https://vip.vetbiz.va.gov/)

1. Based upon the requirements in the draft Product Description; provide any questions or recommended changes you may have to the draft Product Description. B. Capability Statement Submit a brief capability statement describing your company s ability to meet the requirements in the attached draft PD.

Confirm whether your proposed solution is Section 508 compliant and provide a current VPAT/ACR (Voluntary Product Accessibility Template/Accessibility Conformance Report). If any accessibility gaps exist, briefly note them and the planned remediation timeline.

Submit your RFI response to the above questions in accordance with the following: 1) No more than 10-page and no more than 5 MB. 2) Mark your response as Proprietary Information if the information is considered business sensitive.  3) NO MARKETING MATERIALS ARE ALLOWED AS PART OF THIS RFI. The Government will not review generic marketing materials that do not address the information contained herein or the attached document.

Submit the below requested information by 11:00 AM ET on June 4, 2026, via email to Contract Specialist Joshua McGarry at Joshua.McGarry@va.gov. VA reserves the right to not respond to any, all, or select responses or materials submitted. All current VA requirements identified herein or in the attached draft Product Description are subject to change at any time.

Additional Links:U.S. Department of Veterans Affairs

View original listing