Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Vulnerability Detection, Reporting, and VEX Authoring

Active

Federal

Response Deadline08/24/2026, 02:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract titled Vulnerability Detection, Reporting, and VEX Authoring requires the contractor to continuously monitor for software vulnerabilities, with a strict requirement to report any identified issues within 12 hours of discovery. Additionally, the contractor must produce Vulnerability Exploitability eXchange (VEX) documents no later than three days after detection, ensuring each document includes a detailed exploitability analysis and actionable mitigation recommendations tailored to the specific risks identified. The work is performed under a subcontract arrangement, with the place of performance located in Podgorica, Montenegro, and the contracting entity is the US Embassy Podgorica under the Department of State. The solicitation was posted on July 24, 2026, and responses are due by August 24, 2026, with the North American Industry Classification System code 541690 indicating it relates to other professional, scientific, and technical services, specifically those involving cybersecurity and software analysis.

General Info

Contractor must detect, report vulnerabilities within 12 hours, and deliver VEX documents within three days in Podgorica for US Embassy.

Agency

Department Of State → US Embassy PodgoricaView Agency

NAICS

541690 - Other Scientific and Technical Consulting ServicesView NAICS

Place of Performance

Podgorica, ME-16, 81000, MNE

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 24

subcontract

Response DeadlineAug 24

Submission deadline

Response Deadline

08/24/2026, 02:00:00 PM UTCin 30 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of State → US Embassy Podgorica

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of State → US Embassy Podgorica

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Monitor for software vulnerabilities, report within 12 hours, and produce VEX documents within 3 days, including exploitability analysis and mitigation recommendations.

Similar Contracts

Same NAICS industry code

PROFESSIONAL ON-CALL AIRPORT PLANNING SERVICES FOR EAST GEORGIA REGIONAL AIRPORTThe City of Swainsboro is soliciting qualified aviation consulting firms to provide on-call professional airport planning services for the East Georgia Regional Airport, specifically in support of its Airport Capital Improvement Plan. This engagement requires expert consultation in areas such as airport development, infrastructure planning, regulatory compliance, and long-term strategic planning to guide capital investments and operational enhancements at the facility. The solicitation is open to firms with demonstrated experience in airport planning and a proven ability to deliver technical services tailored to regional airport needs. Responses must be submitted no later than August 13, 2026, at 5:00 PM, with the opportunity identified under solicitation number PE-66723-NONST-2026-000000018. The contract is issued by the City of Swainsboro under the State of Georgia’s procurement system and is categorized under SLED government procurement. All work is to be performed in Georgia, and inquiries should be directed to Jerry Cadle at Jerry@cadlelawfirm.com. There is no set-aside designation specified, and the contract is open to qualified public and private sector consultants meeting the required expertise and credentials.

City of Swainsboro

POSTED

about 23 hours ago

DEADLINE

Hazard Communication and Labeling ServicesThe contract requires the preparation and submission of hazard warning labels and Safety Data Sheets (SDS) that fully comply with OSHA’s 29 CFR 1910.1200 hazard communication standard and the Defense Federal Acquisition Regulation Supplement (DFARS) 252.223-7001 for materials used in packaging and preservation. All documentation must adhere to federal regulatory requirements for accurate chemical hazard identification, classification, and communication, ensuring safe handling, storage, and transportation of materials within Department of Defense operations. The work must be completed to meet stringent military supply chain compliance standards, with deliverables tailored to support DOD logistics and safety protocols. This is a subcontract solicitation under NAICS code 541690, posted on July 24, 2026, with a response deadline of August 7, 2026. The place of performance is specified as Key West, Florida, with a zip code of 33040-5000. The contracting activity falls under the Maritime Supply Chain ESOC Buys division of the Department of Defense, indicating this effort supports naval or maritime supply chain operations. The solicitation is open to qualified subcontractors capable of delivering compliant hazard communication materials on schedule and with technical precision, though no set-aside designation or point of contact information is provided in the data.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Hazardous Materials Compliance & Labeling ServicesThe contract requires the preparation and submission of hazard warning labels and Material Safety Data Sheets (MSDS) that fully comply with OSHA Hazard Communication standards and applicable military regulations. The work is focused on ensuring accurate, standardized documentation for hazardous materials used within the Department of Defense’s Fluid Handling Division, with all deliverables meeting federal safety and labeling requirements. The performance location is specified as New Cumberland, PA, 17070-5002, indicating the need for localized support and potential on-site coordination with defense logistics operations. This is a subcontract opportunity under NAICS code 541690, classified as a professional, scientific, and technical service, and is open for responses until August 3, 2026. The solicitation was posted on July 24, 2026, and interested parties must align their technical proposals with both civilian and military compliance frameworks. While no set-aside designation is specified, bidders are expected to demonstrate proven expertise in hazardous materials documentation, experience with DoD procurement protocols, and the capability to maintain rigorous quality control over label and SDS accuracy to support operational safety across defense supply chains.

FLUID HANDLING DIVISION

POSTED

DEADLINE

Hazardous Materials Compliance and Documentation SupportThe contract requires full compliance with FED-STD-313 for hazardous materials associated with LED lamp components, encompassing accurate hazard labeling, timely submission of material safety data sheets, and seamless coordination with shipping procedures to meet both Department of Defense and OSHA regulatory standards. All documentation and labeling must align precisely with federal safety protocols to ensure legal and operational adherence across the supply chain. This subcontract is designated as a Service-Disabled Veteran-Owned Small Business Set-Aside under NAICS code 541690, reserved for qualifying small businesses owned by service-disabled veterans. The opportunity was posted on July 24, 2026, with a response deadline of July 31, 2026, and is administered by the Department of Defense under the Construction & Equipment MRO SVC I contract structure. Performance location details are unspecified, but all work must be executed in accordance with federal mandates and coordinated through the official DIBBS portal linked in the solicitation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Hazardous Material Compliance & Packaging ServicesThe contract seeks specialized services to ensure full regulatory compliance with Department of Defense and OSHA standards for the packaging, labeling, and documentation of hazardous materials. The work involves adhering to all applicable federal safety and transport regulations to support secure and lawful handling of dangerous goods within military supply chains. Providers must demonstrate expertise in hazardous material management, including accurate labeling, proper container selection, and compliant documentation procedures that meet DoD-specific requirements. This subcontract opportunity is part of the Maritime Supply Chain initiative under the Department of Defense and falls under NAICS code 541690 for other scientific and technical consulting services. Responses are due by July 29, 2026, with the solicitation posted on July 24, 2026. There is no specified set-aside designation, and performance location details are not provided. Contractors must be prepared to deliver services that integrate seamlessly into DoD logistics operations, ensuring ongoing compliance across all phases of hazardous material handling, from storage to transport.

MARITIME SUPPLY CHAIN

POSTED

DEADLINE

Hazardous Materials Compliance and Labeling SupportThis contract requires support for hazardous materials compliance in alignment with OSHA HAZCOM standards and DFARS regulations, focusing on accurate labeling and proper Safety Data Sheet documentation for all hazardous substances. The subcontractor must ensure that all communication materials meet federal requirements for identifying chemical hazards, providing handling instructions, and maintaining up-to-date SDS records across all applicable operations. The work is tied to the Department of Defense’s Land Supply Chain and falls under the NAICS code 541690, indicating specialized scientific and technical consulting services related to regulatory compliance and safety practices. The response deadline for this subcontract opportunity is July 29, 2026, with the solicitation posted on July 24, 2026, and performance is expected to support Department of Defense supply chain functions. There is no specified set-aside classification or place of performance details provided, and all compliant deliverables must be coordinated without reference to geographic constraints. The contracting entity is managed through the DLA DIBBS platform, and any participant must fully satisfy HAZCOM and DFARS obligations to meet contract obligations.

LAND SUPPLY CHAIN

POSTED

DEADLINE

Hazard Communication Compliance (Hazardous Materials Documentation)The contract requires the preparation and submission of Material Safety Data Sheets and hazard labels for all hazardous materials used in production or plating operations, ensuring full compliance with OSHA’s Hazard Communication Standard under 29 CFR 1910.1200. This subcontract is issued by the ASC Commodities Division under the Department of Defense and targets service providers capable of accurately documenting chemical hazards in accordance with federal safety regulations. The work must be completed and submitted by the response deadline of July 31, 2026, following the solicitation posted on July 24, 2026. The North American Industry Classification System code 541690 indicates this is a professional, scientific, and technical service related to other scientific and technical consulting services, suggesting the need for specialized expertise in chemical safety documentation. Performance location details are unspecified, and no set-aside status or point of contact information is provided, indicating a broad eligibility for qualified subcontractors to respond.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Network Infrastructure Evaluation & AssessmentThe contract seeks a comprehensive evaluation of the ICON optical network to assess performance, detect degradation, and determine necessary upgrades using diagnostic tools such as OTDR. The work involves analyzing network health, identifying bottlenecks or failures, and recommending actionable improvements to ensure optimal functionality and future scalability. The assessment must be thorough, leveraging industry-standard techniques to pinpoint issues that may impact service reliability or bandwidth capacity. The solicitation is classified as a subcontract under NAICS code 541690 and is open for response until July 31, 2026. It is issued by the City of Denton in Texas, with performance expected to take place within its jurisdiction. Bidders must submit their proposals by the stated deadline, though no specific set-aside provisions or point of contact details are provided. The evaluation is critical to maintaining the integrity of the city’s optical infrastructure and guiding strategic investments in network modernization.

POSTED

DEADLINE

Jail Efficiency StudySnohomish County is seeking qualified firms to conduct a Jail Efficiency Study under solicitation RFP-26-0779BC, with bid documents available to registered users. The request for proposals is open for submission until August 13, 2026, at 1:00 PM, following a clarification deadline of August 5, 2026, at 1:00 PM. The study aims to evaluate operational efficiency within the county’s jail system and is categorized under NAICS code 541690, indicating professional, scientific, and technical services. Proposals must be submitted through the official procurement portal, and all inquiries should be directed via email to purchasing@snoco.org. The contract is open to U.S.-based entities, with performance expected in Washington State, and the award will be made as a sole-source or competitive solicitation under the state and local government (SLED) procurement framework. Access to detailed documents, questions, and responses requires user registration and login to the procurement platform.

Snohomish County

POSTED

DEADLINE

Audit & Compliance Support ServicesThe contract titled Audit & Compliance Support Services is a subcontract issued by Tarrant County, Texas, aimed at providing comprehensive support for audit readiness and response activities. The primary focus involves ensuring proper documentation is accessible, facilitating remediation efforts to address audit findings, and coordinating effectively with Tarrant County auditors to maintain compliance and operational transparency. Contractors are expected to deliver timely and accurate support throughout the audit lifecycle, from preparation through resolution, to uphold the county’s accountability standards. This opportunity is open for bids until August 24, 2026, and is classified under NAICS code 541690, which encompasses other administrative and support services. There is no set-aside designation specified, and the place of performance and point of contact details are not provided in the posting. Interested parties must respond through the official portal linked in the solicitation, and all work must align with the expectations set by Tarrant County to ensure seamless collaboration and compliance with local audit requirements.

POSTED

DEADLINE

Inspection and Acceptance SupportThe contract involves providing comprehensive support for the government inspection and acceptance of camcorders, requiring detailed documentation, proper setup, and live demonstrations to be conducted at the designated destination. The work is classified as a subcontract under NAICS code 541690 and is being procured by the Government of Jamaica through the HEART NSTA/Trust organization, with all activities centered around ensuring the equipment meets required standards through hands-on validation and formal acceptance procedures. The solicitation was posted on July 24, 2026, and the place of performance is not specified in the provided details, but the scope necessitates physical presence at the location where the inspection will occur. No set-aside information or point of contact is listed, and the official link for additional details is provided through the Jamaica e-procurement portal.

HEART NSTA/Trust

POSTED

DEADLINE

Prohibited Foreign Technology ComplianceAll components supplied under this contract must be free from any banned foreign-sourced technology, including but not limited to products from Huawei, ZTE, and Kaspersky, with strict adherence to Federal Acquisition Regulation clauses requiring certification of compliance. Subcontractors are obligated to provide documented evidence and official certification verifying that no prohibited technology is present in any part of the delivered goods or services. The contract is classified as a subcontract under NAICS code 541690 and is managed by the Department of Homeland Security’s Sflc Procurement Branch 2. The solicitation was posted on July 24, 2026, with responses due by August 8, 2026, at 5:00 PM Eastern Time, and performance is expected to fulfill all requirements without geographic restrictions specified, though all sourcing and manufacturing must align with U.S. federal prohibitions on foreign technology.

Sflc Procurement Branch 2(00085)

POSTED

DEADLINE

More opportunities from Department Of State → US Embassy Podgorica

Same awarding agency

Water Quality Testing and Laboratory ServicesThe contract requires weekly analysis of water samples from potable and HVAC systems with a strict 24-hour turnaround for reporting results and providing corrective recommendations. The contractor must offer both remote diagnostics and on-site testing capabilities to ensure timely and accurate assessments of water quality. Services are to be performed at the US Embassy in Podgorica, with the specified zip code 81000 serving as the place of performance. The work falls under NAICS code 541380, categorizing it as other scientific and technical consulting services. This subcontract, posted on July 24, 2026, has a response deadline of August 17, 2026, and is issued by the US Department of State through the US Embassy Podgorica, reflecting a focus on maintaining safe water standards in a diplomatic facility.

Testing Laboratories and Services

POSTED

DEADLINE

Water Treatment Chemical and Equipment SupplyThe contract entails the supply of all necessary chemicals, testing kits, and specialized equipment required to maintain potable and HVAC water treatment systems at the US Embassy in Podgorica. All items must be pre-approved by the Contracting Officer’s Representative and accompanied by complete documentation to ensure compliance with federal standards and operational requirements. The scope is specifically tailored to support the embassy’s water quality and system integrity, covering both drinking water and heating, ventilation, and air conditioning water treatment needs. The contract is structured as a subcontract under NAICS code 424690 and is set to expire with a response deadline of August 17, 2026. Performance is localized to Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the US Department of State through the US Embassy in Podgorica, and all procurements must align with diplomatic and federal procurement protocols. The solicitation was posted on July 24, 2026, with no set-aside designations applied, and interested vendors must adhere strictly to the approval and documentation processes outlined in the agreement.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

HVAC Water Treatment System MaintenanceThe contract pertains to the annual maintenance of HVAC water systems at the US Embassy in Podgorica, requiring comprehensive inspection and treatment to manage corrosion, scaling, and microbiological fouling. Services include regular water chemistry analysis, precise chemical dosing to maintain optimal system conditions, and detailed performance reporting to ensure system efficiency and longevity. The work is governed under NAICS code 238220 and is structured as a subcontract, with all activities to be performed on-site at the embassy location in Podgorica, Montenegro, under the jurisdiction of the Department of State. The solicitation was posted on July 24, 2026, and proposals must be submitted by August 17, 2026, at 10:00 AM. The place of performance is specifically designated as Podgorica with a postal code of 81000, and while no point of contact is listed, the contract is linked to the SAM.gov portal for official access to bidding details. The scope emphasizes consistent, high-quality service delivery to sustain the integrity of the embassy’s HVAC infrastructure in alignment with federal operational standards.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

Potable Water Treatment System MaintenanceThe contract entails annual on-site inspection, testing, and maintenance of the potable water system at the US Embassy in Podgorica to ensure adherence to health and safety standards, specifically targeting turbidity, chlorine levels, and LSI balance. The work requires comprehensive evaluation and servicing of the water treatment infrastructure to maintain safe drinking water quality for embassy personnel and operations. In addition to technical maintenance, the contract mandates the training of embassy staff on proper system operation and safety protocols, along with the submission of detailed service reports documenting all testing results, corrective actions taken, and compliance verification. The solicitation is classified as a subcontract under NAICS code 221320, and responses are due by August 17, 2026. The work must be performed at the embassy's location in Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the US Embassy Podgorica under the Department of State, and the requirement is positioned to support the ongoing operational readiness and health compliance of the diplomatic mission. No set-aside status is specified, and the opportunity is accessible to qualified subcontractors who can meet the technical, reporting, and training obligations outlined in the scope.

Sewage Treatment Facilities

POSTED

DEADLINE

On-Site Service Coordination and Embassy LiaisonThe contract titled On-Site Service Coordination and Embassy Liaison requires the successful bidder to manage and coordinate all on-site service activities at the US Embassy in Podgorica, ensuring seamless execution of tasks in alignment with embassy-specific protocols. Responsibilities include scheduling services with embassy personnel, securing and managing site access, overseeing subcontractors to maintain performance standards, and guaranteeing full compliance with security, operational, and procedural guidelines unique to the diplomatic compound. The work is inherently tied to the physical location in Podgorica, Montenegro, with the zip code 81000 designated as the place of performance. The solicitation is structured as a subcontract under NAICS code 561110, which classifies it as administrative and support services, and is issued by the US Department of State through the US Embassy Podgorica. The posting date is July 24, 2026, with proposals due by August 17, 2026, at 10:00 AM Eastern Time. While no set-aside designation is specified, the contract demands precise coordination with government personnel and strict adherence to diplomatic site requirements, making experience in embassy environments and familiarity with federal and international operational protocols essential for qualified applicants.

Office Administrative Services

POSTED

DEADLINE

Fuel System Parts and Component SupplyThe contract entails the supply of OEM or approved replacement parts essential for fuel system maintenance, including filters, seals, gaskets, sensors, and pumps, to support operational readiness at the US Embassy in Podgorica, Montenegro. All components must meet stringent quality standards and be delivered with full international logistics coordination, including customs clearance, to ensure timely and compliant delivery to the designated location in Podgorica with a ZIP code of 81000. The solicitation is classified as a subcontract under NAICS code 423830, indicating a focus on automotive parts and supplies wholesaling, and is issued by the Department of State through the US Embassy Podgorica. The opportunity was posted on July 24, 2026, with a firm response deadline of August 17, 2026, at 10:00 AM, and requires proposers to demonstrate proven experience in global supply chain management for critical defense or diplomatic infrastructure maintenance.

Industrial Machinery and Equipment Merchant Wholesalers

POSTED

DEADLINE

Technical Reporting and Compliance DocumentationThe contract requires the preparation and submission of technical check reports, compliance certifications, and performance data related to fuel system maintenance activities, all in strict alignment with U.S. government standards. This work is part of a subcontract under the U.S. Department of State, specifically managed by the U.S. Embassy in Podgorica, and must be performed in Podgorica, Montenegro, with a postal code of 81000. The work is governed by NAICS code 541330, indicating it falls under engineering services, and demands precise documentation to ensure regulatory adherence and operational readiness. All submissions must meet federal requirements for accuracy, timeliness, and consistency, with the contractor expected to maintain rigorous tracking of maintenance outcomes and compliance status. The opportunity was posted on July 24, 2026, and responses are due by August 17, 2026, at 10:00 AM, making it a time-sensitive obligation. Although no specific set-aside designation or point of contact is provided, the contract is explicitly tied to U.S. diplomatic operations abroad, requiring a thorough understanding of international compliance frameworks and the ability to deliver high-standard technical documentation under foreign operational conditions.

Engineering Services

POSTED

DEADLINE

Fuel System Preventive Maintenance ServicesThe contract entails the provision of annual preventive maintenance services for all fuel system components at the U.S. Embassy in Podgorica, including storage tanks, pumps, filters, transfer systems, and associated controls. The work must be performed to ensure the continued safety, operational reliability, and full compliance with manufacturer specifications and environmental regulations, maintaining the integrity of critical fuel infrastructure essential to embassy operations. All maintenance activities are required to meet stringent standards to prevent downtime, mitigate hazards, and uphold federal and host nation compliance requirements. This subcontract opportunity is posted with a response deadline of August 17, 2026, and is categorized under NAICS code 811310 for industrial and commercial machinery and equipment repair and maintenance. The place of performance is firmly established in Podgorica, Montenegro, with the U.S. Department of State’s Embassy serving as the contracting entity. While no set-aside provisions or specific point of contact details are provided, interested parties must submit proposals prior to the stated deadline to be considered for award, with performance expectations centered on precision, regulatory adherence, and uninterrupted system functionality.

Commercial and Industrial Machinery and Equipment (except Automotive and Electronic) Repair and Maintenance

POSTED

DEADLINE

E-Verify and Employment Compliance ServicesThe contract requires the administration of E-Verify checks for all employees engaged under the subcontract, ensuring full compliance with the Federal Acquisition Regulation clause 52.222-54 concerning employment verification. The contractor must implement processes to accurately verify the employment eligibility of every worker, maintain complete and audit-ready documentation throughout the contract term, and remain prepared for federal compliance reviews at any time. All activities must align with U.S. government standards for workforce verification and recordkeeping. This subcontract is issued by the U.S. Embassy in Podgorica under the Department of State, with performance located in Podgorica, Montenegro, at the zip code 81000. The solicitation was posted on July 24, 2026, and responses are due by August 24, 2026. The North American Industry Classification System code 561331 applies, indicating the work falls under employment placement services. The contract is classified as a subcontract without a specific set-aside designation, and the responsible agency has not listed a point of contact.

POSTED

DEADLINE

Identity and Access Management for Contractor PersonnelThe contract requires support for compliance with the Department of State’s Personnel Identity Verification policy by managing end-to-end identity verification, badging, and PIV card issuance for contractor personnel who need access to U.S. government facilities in Podgorica. This includes validating the identity of contractors, ensuring adherence to federal credentials standards, and coordinating the physical and digital processes necessary to issue and maintain secure access credentials. All activities must align with DOS PIC requirements to ensure only authorized individuals gain entry to sensitive government locations. The work is scoped specifically to support the U.S. Embassy in Podgorica under the NAICS code 541612 for management consulting services and is structured as a subcontract. Proposals must be submitted by August 24, 2026, and the performance location is fixed at the embassy facility in Podgorica with a postal code of 81000. The contract does not specify set-aside status or point of contact details, and all responsibilities center on maintaining secure, compliant identity and access management systems tailored to the operational needs of U.S. government personnel and contractors operating within the embassy’s jurisdiction.

Human Resources Consulting Services

POSTED

DEADLINE

Cybersecurity Supply Chain Risk Management (C-SCRM) ConsultingThe contract seeks consulting services to implement Cybersecurity Supply Chain Risk Management (C-SCRM) practices focused on enhancing the security of digital supply chains for the US Embassy in Podgorica. Core responsibilities include conducting comprehensive vendor risk assessments, verifying the provenance of critical hardware and software components, and actively identifying and mitigating risks associated with the use of banned telecommunications equipment. These efforts are aimed at safeguarding sensitive diplomatic operations against supply chain threats by ensuring all third-party technologies meet stringent cybersecurity standards and comply with federal prohibitions on equipment from untrusted vendors. The solicitation is structured as a subcontract under NAICS code 541618, which categorizes it under other scientific and technical consulting services. The response deadline is August 24, 2026, and the work is to be performed in Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the Department of State through the US Embassy in Podgorica, and while no specific set-aside provisions are indicated, the engagement requires specialized expertise in supply chain security and international regulatory compliance. The project underscores the urgency of securing digital infrastructure abroad by enforcing rigorous supply chain controls against evolving cyber threats.

Other Management Consulting Services

POSTED

DEADLINE

Software Attestation and Compliance CertificationThe contract requires the provision of formal software attestations following major system updates, ensuring adherence to secure development practices as defined by the NIST Secure Software Development Framework and applicable federal cybersecurity guidelines. These attestations must be comprehensive, documented, and submitted to verify that all software modifications have been developed, tested, and deployed using validated secure engineering controls, threat modeling, and input validation procedures aligned with federal standards. The work is scoped to support the U.S. Embassy in Podgorica under the Department of State and must be performed primarily in Podgorica, Montenegro, with a zip code of 81000. This is a subcontract opportunity classified under NAICS code 541611 for Computer Systems Design Services, with a response deadline of August 24, 2026, at 2:00 PM. The solicitation was posted on July 24, 2026, and there is no set-aside designation or type specified. The contract demands rigorous compliance documentation and accountability, with no provision for informal or partial attestations. Contractors must demonstrate prior experience in federal software compliance, secure development lifecycle management, and must be prepared to substantiate claims with evidence such as artifact logs, code reviews, and third-party validation where applicable. Participation requires full understanding and implementation of NIST SSDF controls across the entire software supply chain.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE