Analygence chosen as company to help NIST address backlog at NVD

Maryland-based cybersecurity company Analygence was hired by the federal government to help reduce a backlog affecting a critical resource used by the cybersecurity community. 

A spokesperson for the National Institute of Standards and Technology (NIST) confirmed the selection after announcing on Wednesday that the agency would be seeking outside help to review the new software and hardware bugs added to the National Vulnerability Database (NVD).

Analygence — founded by U.S. military veterans in 2010 — has a long history of work providing cybersecurity services to U.S. federal agencies and the military. It got its first contract with the Department of Homeland Security in 2017 and since then has 31 contracts with federal entities including the Food and Drug Administration, the U.S. Air Force and the U.S. Navy.

The company previously signed a contract with the Cybersecurity and Infrastructure Security Agency (CISA) centered around vulnerability assessment and coordination within the agency’s “Vulnerability Management Subdivision.”

In December, Analygence beat out 14 companies in obtaining a five-year $125 million contract with NIST to “support the Computer Security Division, the Applied Cybersecurity Division, and other NIST Divisions with related security or privacy work.”

When asked how much cheaper it is for NIST to contract Analygence versus hiring more employees, the NIST spokesperson said the organization “has relied on a combination of contract and full-time staff to support NVD for years.”

Many agencies across the federal government use contract staffing to meet their staffing needs, the spokesperson added.

Analygence did not respond to requests for comment.

Learn more.