Department of Energy Core Security Blanket Purchase Agreement (BPA)

Core Security's Blanket Purchase Agreement (BPA) with the Department of Energy (DOE) establishes a cooperative agreement that streamlines the purchase process, allowing Core Security to efficiently fulfill the recurring needs of the DOE, with their specific requirements in mind.


Core Impact

This penetration testing platform provides a framework for efficiently uncovering and safely exploiting security weaknesses, using the same techniques as today's adversaries. Guided automations, certified exploits, and comprehensive reporting provide valuable insights that help prioritize risk, measure security awareness, and validate remediation efforts.

Network Insight

This Network Traffic Analysis solution reveals critical threats in real time on any device within an infrastructure, using multiple detection engines for analysis to confirm an infection. Security response teams receive actionable alerts with definitive evidence and specific locations of threats for swift remediation.

Scope of Use

Core Security products include software licenses, subscriptions, and services as defined in GSA Schedule 70, which covers Information Technology solutions.


Software maintenance as a product (which may be referred to by other terms, such as “software maintenance”) includes any service provided in support of Commercial Off the Shelf (COTS) software for a defined period of time by a software publisher or reseller to provide software patches, bug fixes, new releases, product upgrades, etc., as well as any related support services to ensure the proper functioning of a software product.

Core Security subscriptions offer up to 24x7 support with one-hour response. Options include:

  • Premium - 24x7 phone support and web support
  • Standard - Phone support during regular business hours and web support
  • Self-support - Maintenance only, with no additional support

These support options are fully outlined in Exhibit A of the BPA contract. Software Maintenance as a product is billed at the time of purchase.

Professional Services

Services provided by the contractor (Core Security or an authorized reseller/distributor) may include installation, consulting or focused, client-directed engineering, and software customization. The contractor will provide services at their facility and/or at the ordering activity location, as agreed to by the contractor and the customer.

Authorized Users

This BPA is open for ordering by all Department of Energy (DoE) components.  For the purposes of this agreement, a DoE component is defined as:

  • The Office of the Secretary of Energy
  • Program offices
  • Staff offices
  • National labs
  • Technology centers
  • Power marketing administration
  • Field sites
  • Other agencies including the National Nuclear Security Administration (NNSA) and the Energy Information Administration (EIA) 

The GSA and other applicable ordering organizations/agencies are authorized to place orders under this BPA on behalf of DoE end users. This BPA is also open to DoE contractors authorized to order in accordance with the FAR Part 51.

Sidebar Datasheet

Contract Type:

Department of Energy

Contract Number:

GS-35F-0494T/BPA DE-IM0000011

BPA 89303019AIM000004

Period of Performance:

November 1, 2020 - October 31, 2021

Related Products:

Core Impact

Network Insight

Get Started

For questions and additional information, talk to our government cybersecurity representative, Lee White, today.