Skip to content
BidPulsarBidPulsar™
BidPulsar™FBP Product Division
Built by Federal Bid Partners • team has written hundreds of proposals
RP-Led CMMC
Need proposal or grant support? Talk with our capture and CMMC team.
Book a free consult
Back to opportunities
Executive Office of Technology Services and Security

RFQ 26-04668 for Vulnerability Management Program Support and Penetration Testing Services

Solicitation: Not available
Notice ID: ma_commbuys_526975dc972f87e03dd5
NAICS • 80, 11, 18Set-Aside • SBPP Eligible: NODepartment • Executive Office of Technology Services and SecurityAgency • ITD0001 - Executive Office of Technology Services and SecurityState • MAPosted • —Due • Apr 08, 2026, 03:00 PM UTC• Closes in 0 days

Federal opportunity from ITD0001 - Executive Office of Technology Services and Security • Executive Office of Technology Services and Security. Place of performance: MA. Response deadline: Apr 08, 2026. Industry: NAICS 80, 11, 18.

Department hubAgency hubState hubNAICS searchSet-aside hub

Market snapshot

Baseline awarded-market signal across all contracting (sample of 400 recent awards; refreshed periodically).

Market trends →Awards →
12-month awarded value
$1,606,932,264
Sector total $1,606,932,264 • Share 100.0%
Live
Median
$85,110
P10–P90
$27,155–$718,615
Volatility
Volatile200%
Market composition
NAICS share of sector
A simple concentration signal, not a forecast.
100.0%
share
Momentum (last 3 vs prior 3 buckets)
+100%($1,606,932,264)
Deal sizing
$85,110 median
Use as a pricing centerline.
Live signal is computed from awarded notices already observed in the system.
NAICS 80 trendsSector 80 trendsDepartmentAgencyMA state hubAll trends
Signals shown are descriptive of observed awards; not a forecast.

Related hubs & trends

Navigate the lattice: hubs for browsing, trends for pricing signals.

State MANAICS 80 searchSector 80 trendsSet-asideSet-aside trendsDepartmentDepartment trendsAgencyAgency trends
We write these bids →
Open on official portal →
Map for MA
Live POP
Place of performance
1 No Address See Item Section for specific information Vendors need to check the Items section of the PO for ship to information Boston, MA 02108 US Email: seeitemsssection@xxx.com Phone: (617) 626-4400
State: MA
Contracting office
Not listed

Applicable Wage Determinations

SAM WDOL references matched to this opportunity's location and scope language.

WD Directory →
Best fit for this contractDavis-Bacon
MA20260010 (Rev 0)
Match signal: state matchOpen WD
Published Jan 02, 2026Massachusetts • Berkshire, Franklin, Hampden +1
Rate
BOILERMAKER
Base $50.62Fringe $28.82
Rate
BRICKLAYER BRICKLAYERS; CEMENT MASONS; PLASTERERS; STONE MASONS; MARBLE, TILE & TERRAZZO WORKERS
Base $50.81Fringe $32.27
+64 more occupation rates available in the full WD.
View more for this contract
3 more WD matches and 64 more rate previews.
↓
Davis-BaconBest fitstate match
MA20260010 (Rev 0)
Open WD
Published Jan 02, 2026Massachusetts • Berkshire, Franklin, Hampden +1
Rate
BOILERMAKER
Base $50.62Fringe $28.82
Rate
BRICKLAYER BRICKLAYERS; CEMENT MASONS; PLASTERERS; STONE MASONS; MARBLE, TILE & TERRAZZO WORKERS
Base $50.81Fringe $32.27
Rate
DIVER TENDER
Base $61.70Fringe $35.47
+63 more occupation rates in this WD
Davis-Baconstate match
MA20260011 (Rev 0)
Open WD
Published Jan 02, 2026Massachusetts • Franklin
Rate
Insulator/asbestos worker (Includes the application of all insulating materials, protective coverings, coatings and finishes to all types of mechanical systems.)
Base $44.36Fringe $36.63
Rate
BOILERMAKER
Base $50.62Fringe $28.82
Rate
BRICKLAYER BRICKLAYERS; CEMENT MASONS; PLASTERERS; STONE MASONS; MARBLE, TILE & TERRAZZO WORKERS
Base $50.81Fringe $32.27
+54 more occupation rates in this WD
Davis-Baconstate match
MA20260019 (Rev 0)
Open WD
Published Jan 02, 2026Massachusetts • Hampden
Rate
POWER EQUIPMENT OPERATOR Group 1
Base $57.83Fringe $33.70
Rate
Group 2
Base $57.18Fringe $33.70
Rate
POWER EQUIPMENT OPERATOR Group 1
Base $42.88Fringe $31.04
+21 more occupation rates in this WD
Davis-Baconstate match
MA20260007 (Rev 0)
Open WD
Published Jan 02, 2026Massachusetts • Franklin
Rate
CARPENTER
Base $43.33Fringe $27.82
Rate
Power equipment operators: (1) Backhoe/Excavator/Trackhoe
Base $42.88Fringe $31.04
Rate
A (1) Loader
Base $42.88Fringe $31.04
+8 more occupation rates in this WD

Point of Contact

Not available

Agency & Office

Department
Executive Office of Technology Services and Security
Agency
ITD0001 - Executive Office of Technology Services and Security
Subagency
ITD0001 - Executive Office of Technology Services and Security
Office
Shawn Johnson
Contracting Office Address
Not available

Description

The purpose of this RFQ is to solicit bids for Vulnerability Management Program Support, Application Security Program Support, and Penetration Testing Services. See RFQ for complete detail. Respondents must be current awarded bidders under Statewide Contract ITS78. Non-ITS78 vendors may collaborate with ITS78 vendors provided that the ITS78 vendor submits the bid, and that the relationship and duties are clear.

Files

Files size/type shown when available.

Attachment 1
—
Download →
Attachment 2
—
Download →
Attachment 3
—
Download →
Attachment 4
—
Download →
Attachment 5
—
Download →
Attachment 6
—
Download →

BidPulsar Analysis

A practical, capture-style breakdown of fit, requirements, risks, and next steps.

Updated: Mar 26, 2026
Client-ready brief
Executive summary
medium confidencegpt 4o mini

The RFQ 26-04668 issued by the Executive Office of Technology Services and Security seeks bids for Vulnerability Management Program Support, Application Security Program Support, and Penetration Testing Services. Proposals are due by April 6, 2026, and only current awarded bidders under Statewide Contract ITS78 can submit bids directly. Non-ITS78 vendors may partner with these awarded vendors under clear terms. This opportunity requires specific expertise in cybersecurity, making it critical for firms to understand the RFQ details thoroughly.

Vulnerability ManagementApplication SecurityPenetration TestingCybersecurity ServicesStatewide Contract ITS78
What the buyer is trying to do

The buyer aims to enhance its cybersecurity posture through professional support and testing services in vulnerability management and application security.

Who should pursue this
  • Cybersecurity firms with experience in vulnerability management
  • Companies with current awards under Statewide Contract ITS78
  • Firms capable of providing application security support and penetration testing
Work breakdown
  • Review RFQ and attachment details
  • Ensure eligibility under Statewide Contract ITS78
  • Develop a collaborative team structure if partnering with non-ITS78 vendors
  • Prepare bid documentation
  • Submit bid by the deadline
Response package checklist
  • Review of the complete RFQ
  • Proof of current ITS78 award
  • Clear outline of duties if collaborating with non-ITS78 vendors
  • Technical proposals for the required services
  • Pricing strategy and company qualifications
More BidPulsar strategy notesCompliance, pricing, teaming, risks, questions, and coverage notes
Compliance notes
  • Must comply with the terms outlined in RFQ
  • Proof of current compliance under Statewide Contract ITS78 is mandatory
Pricing strategy
  • Competitive pricing is likely essential for securing the bid
  • Budget considerations based on scope of services offered
Teaming and subs
  • Identify ITS78 vendors for collaboration
  • Clarify roles and responsibilities with partners before submission
Risks and watchouts
  • Ensure compliance with the RFQ stipulations to avoid bid disqualification
  • The competitive nature of the cybersecurity sector may pressure pricing
Smart questions to ask
  • What specific criteria will be used to evaluate the proposals?
  • Can a list of approved ITS78 vendors be shared for potential teaming?
  • What are the expected deliverables for each area of service requested?
Source coverage notes

Some notices publish limited source detail. Confirm these points before final bid/no-bid decisions.

  • No specific budget range provided
  • Details on performance metrics or expectations are unclear
  • No specific contact information for follow-up questions
  • Absence of success criteria for this program
  • Limited information on competitors in the bid
  • Lack of historical performance data for previous contracts
  • Nothing provided on the anticipated number of bids expected
  • No performance start or end dates given for this contract
Ask Us To Handle This Bid →Our Services →

FAQ

How do I use the Market Snapshot?

It summarizes awarded-contract behavior for the opportunity’s NAICS and sector, including a recent pricing band (P10–P90), momentum, and composition. Use it as context, not a guarantee.

Is the data live?

The signal updates as new awarded notices enter the system. Always validate the official award and solicitation details on SAM.gov.

What do P10 and P90 mean?

P10 is the 10th percentile award size and P90 is the 90th percentile. Together they describe the typical spread of award values.