DISA Cybersecurity Service Provider (CSSP) / J34 External Vulnerability Scans (EVS) and Web Vulnerability Scans (WVS)

The Defense Information Systems Agency (DISA) is seeking a Cybersecurity Service Provider to conduct External Vulnerability Scans (EVS) and Web Vulnerability Scans (WVS) under its J34 contract. This effort will support DISA’s continuous security posture by identifying and reporting vulnerabilities across its external network and web applications. The work includes scanning, analysis, remediation guidance, and compliance reporting in accordance with a Performance Work Statement (PWS). • Perform regular external network vulnerability assessments and web application scans. • Produce detailed findings, risk ratings, and remediation recommendations. • Ensure compliance with DISA security policies and federal cybersecurity standards. • Deliver periodic reporting and support for any follow‑up actions.