Treasury's IRS awards $2.75M CyberArk ELA for Certificate Manager, ensuring 3-year software access
Contract Overview
Contract Amount: $2,750,023 ($2.8M)
Contractor: Thundercat Technology, LLC
Awarding Agency: Department of the Treasury
Start Date: 2026-03-12
End Date: 2027-03-11
Contract Duration: 364 days
Daily Burn Rate: $7.6K/day
Competition Type: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES
Number of Offers Received: 3
Pricing Type: FIRM FIXED PRICE
Sector: IT
Official Description: CYBERARK-ELA-BASE, CYBERARK CERTIFICATE MANAGER ENTERPRISE
Place of Performance
Location: LANHAM, PRINCE GEORGES County, MARYLAND, 20706
State: Maryland Government Spending
Plain-Language Summary
Department of the Treasury obligated $2.8 million to THUNDERCAT TECHNOLOGY, LLC for work described as: CYBERARK-ELA-BASE, CYBERARK CERTIFICATE MANAGER ENTERPRISE Key points: 1. The contract provides essential cybersecurity software for the IRS. 2. Competition was full and open after exclusion of sources, suggesting a competitive process. 3. The firm fixed price contract type helps control costs. 4. The contract duration of 364 days is standard for software licensing.
Value Assessment
Rating: good
The award amount of $2.75M for a 3-year enterprise license for CyberArk Certificate Manager appears reasonable given the software's critical security function. Benchmarking against similar enterprise cybersecurity software contracts would provide further validation.
Cost Per Unit: N/A
Competition Analysis
Competition Level: full-and-open
The contract was awarded under 'FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES,' indicating that while other sources were initially considered, the final award was made through a competitive process. This method generally promotes price discovery and fair market value.
Taxpayer Impact: The $2.75M expenditure for essential cybersecurity software is a necessary investment for the IRS to protect sensitive taxpayer data, representing a justifiable use of taxpayer funds.
Public Impact
Ensures continued protection of sensitive IRS systems and taxpayer data. Supports the IRS's ongoing digital transformation and cybersecurity posture. Provides critical software for managing digital certificates, vital for secure transactions.
Waste & Efficiency Indicators
Waste Risk Score: 75 / 10
Positive Signals
- Critical cybersecurity software acquisition
- Firm fixed price contract
- Full and open competition utilized
Sector Analysis
This contract falls within the IT sector, specifically focusing on cybersecurity software. Spending on cybersecurity solutions continues to rise across government agencies as threats evolve. The IRS's investment aligns with broader federal efforts to enhance digital security.
Small Business Impact
The data does not indicate any specific set-asides for small businesses. The awardee, THUNDERCAT TECHNOLOGY, LLC, is not identified as a small business in this context, suggesting the primary focus was on technical capability and competitive pricing.
Oversight & Accountability
The contract was awarded by the Department of the Treasury's Internal Revenue Service, indicating standard federal procurement oversight. The firm fixed price structure and competitive award process contribute to accountability.
Related Government Programs
- Other Computer Related Services
- Department of the Treasury Contracting
- Internal Revenue Service Programs
Risk Flags
- Potential for future price increases upon renewal.
- Reliance on a single vendor for critical certificate management.
- Need for specialized expertise to manage the software effectively.
Tags
other-computer-related-services, department-of-the-treasury, md, delivery-order, 1m-plus
Frequently Asked Questions
What is this federal contract paying for?
Department of the Treasury awarded $2.8 million to THUNDERCAT TECHNOLOGY, LLC. CYBERARK-ELA-BASE, CYBERARK CERTIFICATE MANAGER ENTERPRISE
Who is the contractor on this award?
The obligated recipient is THUNDERCAT TECHNOLOGY, LLC.
Which agency awarded this contract?
Awarding agency: Department of the Treasury (Internal Revenue Service).
What is the total obligated amount?
The obligated amount is $2.8 million.
What is the period of performance?
Start: 2026-03-12. End: 2027-03-11.
What is the specific value proposition of CyberArk Certificate Manager for the IRS?
CyberArk Certificate Manager provides automated discovery, management, and security for privileged credentials, including digital certificates. For the IRS, this translates to enhanced security for critical systems, reduced risk of certificate-related breaches, streamlined compliance, and improved operational efficiency in managing a complex digital certificate infrastructure.
What are the primary risks associated with this contract award?
Potential risks include vendor lock-in with CyberArk, the possibility of future price increases upon renewal, and the need for skilled personnel to effectively implement and manage the software. Ensuring robust contract management and performance monitoring will be crucial to mitigate these risks.
How does this contract contribute to the IRS's overall cybersecurity effectiveness?
This contract directly enhances the IRS's cybersecurity by securing critical digital certificates, which are foundational for secure communication and authentication. By automating management and reducing manual errors, it strengthens the agency's defense against sophisticated cyber threats targeting identity and access management.
Industry Classification
NAICS: Professional, Scientific, and Technical Services › Computer Systems Design and Related Services › Other Computer Related Services
Product/Service Code: IT AND TELECOM - COMPUTE
Competition & Pricing
Extent Competed: FULL AND OPEN COMPETITION AFTER EXCLUSION OF SOURCES
Solicitation Procedures: SUBJECT TO MULTIPLE AWARD FAIR OPPORTUNITY
Offers Received: 3
Pricing Type: FIRM FIXED PRICE (J)
Evaluated Preference: NONE
Contractor Details
Parent Company: Thundercat Technology LLC
Address: 11190 SUNRISE VALLEY DR STE 200, RESTON, VA, 20191
Business Categories: Category Business, Corporate Entity Not Tax Exempt, Limited Liability Corporation, Service Disabled Veteran Owned Business, Small Business, Special Designations, U.S.-Owned Business, Veteran Owned Business
Financial Breakdown
Contract Ceiling: $8,669,398
Exercised Options: $2,750,023
Current Obligation: $2,750,023
Contract Characteristics
Commercial Item: COMMERCIAL PRODUCTS/SERVICES
Parent Contract
Parent Award PIID: NNG15SC92B
IDV Type: GWAC
Timeline
Start Date: 2026-03-12
Current End Date: 2027-03-11
Potential End Date: 2029-03-11 10:08:11
Last Modified: 2026-04-08
More Contracts from Thundercat Technology, LLC
- Intersystems Software Updates and Technical Assistance — $222.0M (Department of Veterans Affairs)
- Internet Operations Management — $139.2M (Department of Defense)
- Itau/Swm/Renew Software Maintenance for Ca/Broadcom Software — $71.6M (Department of Justice)
- Palo Alto Networks Enterprise License Agreement (ELA) for the National Nuclear Security Administration (nnsa) — $58.3M (Department of Energy)
- Nasa Sewp Award of Talent Management System 2.0 Sustainment Services — $51.3M (Department of Veterans Affairs)
Other Department of the Treasury Contracts
- Advertising Services — $636.5M (True North Communications Inc)
- Cade 2 Ltis3 Covid-19 — $383.8M (Deloitte Consulting LLP)
- Establish a Broad Networking and Telecommunications Service Environment to Meet ITS Network Services (wide Area and Local Area Network), Voice Telecommunications Services, Audio/Video/Web Conferencing, and Cyber Requirements — $320.2M (AT&T Enterprises, LLC)
- THE Internal Revenue Service (IRS), Office of Information Technology Office, Issues This Order Under GSA Alliant 2 (unrestricted). Enterprise Case Management (ECM) Solution Integration Services — $305.5M (Booz Allen Hamilton Inc)
- THE Tfcceis Task Order IS to Transition the Existing Tfcc Services From the Networx Contract Onto the EIS Contract Vehicle in a Manner That Will Enable Continuity of an Enterprise Network of Toll Free Services for the IRS — $264.6M (Verizon Business Network Services LLC)