RFI_HashiCorp_FY26_v2.xlsx
XLSX spreadsheet 20 KB Posted
- Attached to
- FA830726RB013 - Hashi-Corp RFI
- Solicitation number
- FA830726RB013
About this file
This document is a Request for Information (RFI) issued by the Air Force Life Cycle Management Center (AFLCMC) seeking market research on software alternatives for Platform One (P1), specifically for creating and maintaining software threat models and secure compliant code in a DevSecOps environment. The RFI focuses on finding solutions that provide protected secret storage, strong secret and encryption key management, and support for zero-trust security architecture across cloud environments.
The RFI requires potential vendors to complete a comprehensive Excel template detailing alternative software options, including their capabilities in centralized key management, user access control, self-hosted deployment, open-source availability, and secure remote access. Vendors are asked to provide information on licensing types (enterprise, cloud-managed, open-source), pricing plans, transition costs, training options, and willingness to enter a base year contract with up to four one-year options. The government emphasizes that this is solely market research and not a solicitation for award, with responses intended to be used for planning purposes only.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
T&C and Contact Information
| Note: Please read and complete the middle portion. | |
| 1 | This solicitation is issued in accordance with Federal Acquisition Regulation (FAR) Part 12, Acquisition of Commercial Products and Commercial Services, and in conjunction with FAR Part 13, 14, or 15 procedures as specified in the accompanying solicitation documents. The Air Force Life Cycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio–Lackland, Texas, hereby requests proposals from responsible and qualified offerors for the commercial products and/or services described in this solicitation. |
This announcement constitutes a formal request for information (RFI). The Government intends to award a contract resulting from this solicitation to the offeror whose proposal represents the best value to the Government, as determined in accordance with the evaluation criteria set forth herein. Offerors are responsible for reviewing all solicitation provisions, clauses, attachments, and amendments. Submission of a proposal shall signify the offeror’s acknowledgment, understanding, and acceptance of all terms and conditions included in this solicitation.
The Government anticipates using streamlined procedures authorized under FAR Part 12 to the maximum extent practicable. Offerors must ensure that all proposed products and services meet the definition of “commercial” as defined in FAR 2.101.
2 This announcement constitutes a formal solicitation for commercial products and/or commercial services in accordance with FAR Part 12. Offerors are invited to submit proposals in response to the requirements identified in this solicitation. All submitted proposals shall be prepared in accordance with the instructions, terms, and conditions provided herein and in any accompanying attachments or amendments.
This solicitation is a request for proposals and may result in the award of a contract. The Government reserves the right to award without discussions, to hold discussions if necessary, or to make no award depending on the needs of the Government and the quality of the proposals received. Offerors are responsible for monitoring this solicitation for any amendments or updates.
By submitting a proposal, offerors acknowledge and understand that the Government is not obligated to award a contract and that the preparation of proposals is at the offeror’s own expense. The Government will not pay for any costs associated with preparing or submitting proposals, participating in discussions, or providing additional information.
| Company Name: | |
| CAGE/DUNS Code: | |
| Address: | |
| POC Name: | |
| POC E-mail: | |
| POC Phone Number: | |
| 3 | As indicated above, this is solely market research for software alternatives. Please be advised that any quote for software that is already in use, quote for alternative software, or any submissions intended for award evaluation should not be included in conjunction with this document. Any input on this document that contains responses for the software already in-use should not be included and should only contain alternative software data/answers. Your responses will only be used for planning purposes. Please address any comments and/or questions you may have regarding this RFI in writing to the listed POC. |
RFI Q&A
| Description: |
| The purpose of this Government purchase is to provide Platform One (P1) the ability to create and maintain software threat models and secure compliant code in support of the United States Air Force (USAF) Development Security Operations (DevSecOps) while utilizing the flexibility of the cloud. Solution must provide protected secret storage and allow the ability to strongly store/retrieve secrets and encryption keys for trusted resources and denying access to others internally to P1. Also ensuring that keys are available and secure, lowering the risk to P1 systems. |
Note: This document is only interested in alternative software. All three sheets in this document is to be completed.
| Alternative License Types: | |
| 1 | What software do you offer that can fulfill these requriements? |
(Please provide details on available options, such as enterprise, cloud-managed, or open-source/community editions.) [ENTER ANSWER HERE]
2 For each software option/solution, please provide how it meets the requirements.
(Please identify core features or capabilities that are shared across all options, such as log aggregation, visualization tools, and monitoring capabilities, regardless of the license tier type.) [ENTER ANSWER HERE]
3 For each software option/solution, clarify how it meets our requirements per the Requirements Capability Sheet (Sheet 2).
(Please highlight specific ways in which each software, if mulitple, can address our operational, security, and compliance needs, particularly in areas like multi-environment visibility, role-based access control, and support for compliance auditing.) [ENTER ANSWER HERE]
| Pricing Information: | |
| 1 | For each software, please provide estimated transition and training costs and schedule for both transitioning to your proposed solution. |
(Include details on onboarding costs, consulting, or configuration support required for a smooth transition. Specify any training options available, such as workshops, online courses, or documentation resources, and their associated costs.) [ENTER ANSWER HERE]
2 For each software, please provide any price plans associated such as monthly, trial, annual.
(Indicate if discounts are offered for longer-term contracts or high-volume deployments. For cloud-managed options, provide cost breakdowns for storage, query processing, and other usage-based charges.) [ENTER ANSWER HERE]
| Other Considerations: | |
| 1 | Are there any additional features or benefits associated with the software that we should consider? |
(For example, are advanced analytics, machine learning-based anomaly detection, or pre-built integrations with other monitoring tools included at higher licensing tiers? - Please clarify any value-added services, such as dedicated account support, proactive health checks, or best-practice workshops, that come with certain licenses tiers.) [ENTER ANSWER HERE]
2 Is your company willing to enter into contracts with a base year with up to four one-year options? If not, how many years is your company willing to agree to?
(For longer-term contracts, specify any guarantees on pricing, renewal terms, or opportunities to adjust the contract scope to accommodate potential changes in our data volume or monitoring requirements.) [ENTER ANSWER HERE]
Requirements Capability Sheet
| Software Name: | [TYPE NAME HERE] | ||||
| Requirement: | Ready on Day 1 | Future Capability | Estimated date of Capability | Comments | |
| 1 | Centralized management of API keys, passwords, and certificates. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 2 | Ability to dynamically generate users and passwords with visibility into access and utilization across P1 software development platforms. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 3 | Support for a zero-trust security architecture. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 4 | Self-hosted deployment capability. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 5 | Open-source availability. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 6 | Secure, protected secret storage with strong mechanisms for storing and retrieving secrets and encryption keys. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 7 | Robust secret-key management, data storage, data retrieval, and program-access controls to protect against insider threats. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 8 | Secure remote access, enabling authorized users to reach required systems from anywhere at any time. | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. |
File details come from the government source that posted it. Updated .