01 — The Text
What.
- Requires federal contractors handling $250K+ contracts to adopt vulnerability disclosure programs—formal processes for reporting software security holes.
- OMB and Pentagon must update federal contracting rules to mandate these programs align with National Institute of Standards and Technology guidelines.
- Contractors managing federal computer systems must receive and address reports about potential security vulnerabilities in their systems.
02 — The Stakes
So what?
- Defense contractors and tech vendors working with government face new compliance requirements, adding administrative costs to contracts.
- Federal agencies get better visibility into security weaknesses before hackers exploit them, reducing breach risk across government IT systems.
- Software developers and security researchers gain formal channels to report bugs responsibly instead of going rogue or staying silent.
03 — The Path
Now what?
- House passed it March 3 with bipartisan voice vote. Now in Senate Homeland Security committee awaiting review and potential amendments.
- Senate committee must evaluate, vote, and send to full chamber—timeline unclear but no major obstacles identified yet.
- Track progress at Congress.gov or contact your senator if you work in federal contracting and want input on implementation.
Legislative History
Actions.
- Mar 4, 2025 — Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
- Mar 3, 2025 — Motion to reconsider laid on the table Agreed to without objection.
- Mar 3, 2025 — On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
- Mar 3, 2025 — Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
- Mar 3, 2025 — DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
- Mar 3, 2025 — Considered under suspension of the rules. (consideration: CR H930-932)
- Mar 3, 2025 — Mr. Comer moved to suspend the rules and pass the bill, as amended.
- Jan 31, 2025 — Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.