24-68-A-PMO-OITA RFI QA Document_9.18.2024.docx

This document is a Request for Information (RFI) issued by the Internal Revenue Service (IRS) seeking information on artificial intelligence (AI) and/or machine learning (ML)-based application security testing tools. The IRS is interested in capabilities that can provide just-in-time identification of vulnerabilities, recommend secure coding practices, automate security testing, and support the Continuous Authorization to Operate (cATO) process. Key details include:

The IRS is seeking responses in two parts - company profile information and details on the capabilities of the AI/ML-based tools. Responses are due by October 2, 2024 and should not include any proprietary or sensitive information. The IRS may use the non-proprietary technical information received in any future solicitation. This RFI is for market research and planning purposes only and does not constitute a solicitation for proposals or offers. The IRS currently uses Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST) tools and is looking to improve upon these legacy capabilities.