Sole Source Justification for Commercial Acquisitions

This document is a Sole Source Justification for Commercial Acquisitions valued at or below the Simplified Acquisition Threshold, issued by the U.S. Department of Homeland Security, Immigration and Customs Enforcement (ICE), Office of Acquisition Management for the Homeland Security Investigations (HSI) Cyber Crimes Center (C3).

Procurement Details and Rationale

The acquisition (J&A-26-0322) is for a new Firm-Fixed Price (FFP) Task Order from Volexity, Inc. (11654 Plaza America Dr #774, Reston, VA 20190) to provide licenses for memory analysis software (Volcano Server) and digital forensics software (Surge) as part of training requirements for the Computer Intrusion Response Program (CIRP). The Contracting Officer has determined that Volexity is the only source capable of providing the required licenses and software applications needed to analyze data collection from multiple operation systems. The justification emphasizes that Volcano Server is unique in its ability to extract, reconstruct, and visualize data structures and artifacts, and that Surge provides specialized forensic acquisition capabilities meeting United States judicial evidence standards. Market research conducted between April and August 2026 examined alternative products but found they lack the comprehensive feature sets, diverse operating system support, and integrated visualization capabilities necessary for the C3 mission. The document notes that Volexity has no authorized distributors or resellers and that ongoing operational needs and mission-critical information existing in the current Surge Volcano platform would diminish investigation effectiveness if the contract were not awarded to Volexity. The justification was digitally signed by Michelle E. Levine on September 10, 2026.