Continuous Diagnostics & Mitigation Tools

About CDM Tools

MAS Solicitation : IT hardware, IT software

NAICS: IT Consulting

PSC: IT Outsourcing

Eligible users: Federal, state, local, and tribal agencies

Continuous Diagnostics & Mitigation, or CDM, provides federal agencies with capabilities and tools that:

Find cybersecurity risks on an ongoing basis.
Prioritize these risks based upon potential impacts.
Enable cybersecurity personnel to focus on the most significant problems first.

The former CDM Tools Special Item Number retired in 2022. CDM Tools are now available through the Best in Class Hardware and Software SINs.

CDM Tools include tools, maintenance, and related activities like training.

Approved Products List

CDM Tools support the Department of Homeland Security and Cybersecurity and Infrastructure Security Agency CDM program.

The hardware and software products associated with this program undergo a DHS CISA qualification process to be added to the CDM Approved Products List, updated monthly. The CDM program sponsors a monthly "open season" to encourage original equipment manufacturers to refresh and add new, innovative tools to the APL.

How do I buy CDM Tools?

Agencies can order through eBuy and GSA Advantage and issue an RFI or RFQ to vendors. Items with this symbol on GSA Advantage!® meet CISAs conformance requirements and are cataloged on the CISA CDM APL.

Combine SINs to meet your requirements or try a blanket purchase agreement to easily fill recurring needs. You can also set aside the requirement for one or more socio-economic categories including but not limited to small businesses, veteran-owned businesses, and women-owned businesses.

CDM Tools buying guide [DOCX - 52 KB] to help you along your way
Cooperative Purchasing for state, local, and tribal governments

Market Research as a Service to determine your options
Assisted Acquisition Services for cradle to grave support

How do I sell CDM Tools?

MAS contract holder

Submit a modification to add a SIN in the eOffer/eMod portal.

Without an existing MAS contract

Follow the MAS Roadmap guidance for preparing and sending an offer.

If you're a vendor interested in selling your products listed under the CDM program, check out our CDM tools vendor guide [DOCX - 43 KB].
To become a CDM tools vendor, you'll first need to meet CISA's CDM capability functional requirements and be included on the APL.
Once on the APL, you can apply to sell through GSA Schedules and use the CDM symbol in GSA Advantage.

Our FASt Lane and Startup Springboard vendor onboarding programs can get you selling on Schedules even faster.

Need help? Contact the Vendor Support Center.