Analygence chosen as company to help NIST address backlog at NVD

This article was updated at 5:30 p.m. EST with comment from Analygence.

Maryland-based cybersecurity company Analygence was hired by the federal government to help reduce a backlog affecting a critical resource used by the cybersecurity community. 

A spokesperson for the National Institute of Standards and Technology (NIST) confirmed the selection after announcing on Wednesday that the agency would be seeking outside help to review the new software and hardware bugs added to the National Vulnerability Database (NVD).

Analygence — founded by U.S. military veterans in 2010 — has a long history of work providing cybersecurity services to U.S. federal agencies and the military. It got its first contract with the Department of Homeland Security in 2017 and since then has 31 contracts with federal entities including the Food and Drug Administration, the U.S. Air Force and the U.S. Navy.

The company previously signed a contract with the Cybersecurity and Infrastructure Security Agency (CISA) centered around vulnerability assessment and coordination within the agency’s “Vulnerability Management Subdivision.”

"We are looking forward to supporting NIST clear the backlog over the coming months and processing incoming Common Vulnerabilities and Exposures (CVEs) as quickly as possible," a spokesperson with Analygence said.

When asked whether the company has experience with national vulnerability databases, they said Analygence has not done this type of work in other countries but "does have significant experience providing a wide array of Cyber Security services to DHS, and the Air Force."

In December, Analygence beat out 14 companies in obtaining a five-year $125 million contract with NIST to “support the Computer Security Division, the Applied Cybersecurity Division, and other NIST Divisions with related security or privacy work.”

When asked how much cheaper it is for NIST to contract Analygence versus hiring more employees, the NIST spokesperson said the organization “has relied on a combination of contract and full-time staff to support NVD for years.”

Many agencies across the federal government use contract staffing to meet their staffing needs, the spokesperson added.