final sources sought notice.docx

Document Type: Sources Sought Notice Number: NB184000-25-01271 Response Deadline: April 9, 2025 8:00 AM, EST

Contracting Office Address

Department of Commerce National Institute of Standards and Technology (NIST) Acquisition Management Division 100 Bureau Drive Building 301, Room B125, Mail Stop 1640, Gaithersburg MD, 20899-1640

This Notice is for planning purposes only and is not a Request for Proposal or Request for Quotation or an obligation on the part of the NIST for conducting a follow-on acquisition. NIST does not intend to award a contract based on this Notice, or otherwise pay for the information requested. No entitlement or payment of direct or indirect costs or charges by NIST will arise as a result of submission of responses to this Notice and NIST use of such information. NIST recognizes proprietary components, interfaces and equipment, and clearly marked restricted or proprietary components, interfaces and equipment, and data included as an addendum to the non-restricted/non-proprietary information. In the absence of such identification, NIST will assume to have unlimited rights to all technical data in the information paper.

After results of this market research are obtained and analyzed, NIST may conduct a competitive procurement and subsequently award a Purchase Order. If at least two qualified small businesses are identified during this market research stage, then any competitive procurement that resulted would be conducted as a small business set-aside.

NO SOLICITATION DOCUMENTS EXIST AT THIS TIME.

BACKGROUND: The Department of Commerce (DoC) is currently using Sentinel One as the end point protection and centralized vulnerability management software for NetApp add-on, Storage systems for NIST’s mission-critical data storage. All the files that are stored and called upon by a user when requested are scanned locally. No data ever leaves the NIST’s infrastructure network and transferred to an outside network.

NetApp storage systems are currently used for NIST's mission-critical data storage and are specifically supported and protected by Sentinel One's AI-powered threat detection. Sentinel One's AI-powered Threat Detection for NetApp offers threat protection for viruses, worms, spyware, and trojans. Sentinel One's proprietary AI deeply analyzes a file's characteristics for indicators of malicious intent–no signature required. All the files that are stored and called upon by a user when requested are scanned locally. No data ever leaves the NIST's infrastructure network and is transferred to an outside network.

NIST is seeking an Anti-virus protection software for existing NetApp Storge Arrays to prevent Disruption to the high availability applications servers protecting critical NIST enterprise services.

that meets the following Salient characteristics:

- FEDRAMP approved -AI-driven autonomous endpoint security platform that offers real-time threat detection and response as well as reducing the need for manual intervention and improving overall cybersecurity posture -threat protection for viruses, worms, spyware, and trojans.

-deeply analyzes a file’s characteristics for indicators of malicious intent–no signature required -AI powered Threat Detection provides granular policy management for greater deployment flexibility and control, while alerting administrators to virus outbreaks and emergencies to help reduce response time. AI-powered Threat Detection for NetApp creates comprehensive logs that can be fed into our current Splunk and future Singularity Data Lake Logging Infrastructure and reports to help identify dangerous activities before they become threats.

Period of Performance The period of performance shall be for a base year and four (4) one year option periods.

NIST is seeking responses from all responsible socio-economic business under NAICS 513210, Software publisher with a standard size of $47.0M.

Please include company’s size classification and socio-economic status in any response to this notice. Companies able to provide such services are requested to email a detailed response describing their abilities to prateema.carvajal @nist.gov no later than the response date for this source. The report should include any information relevant to your capabilities and the following:

1. Brief narrative providing evidence of the ability to administer robust subscription-based products containing the content and compliant with the specifications described herein.

2. URL’S granting access to the portals of the on-line subscriptions

3. Capabilities Statement discussing core competencies.

4. Current socioeconomic status of your company including applicable North American Industrial Classification System (NAICS) codes.

5. Indication of whether your company currently an active registration has, including on-line representation and certification of the System for Award Management (www.sam.gov) website. Contractors must have a valid current registration to be considered for award.

6. Indication of whether the services are currently on one or more GSA Federal Supply Schedule contract or any other government-wide contracts. If so, please provide the applicable contract number(s).

7. Indication of whether the services proposed is a commercial item currently offered in the marketplace.

8. Any other relevant information that is not listed above which the Government should consider in developing its minimum performance requirements.

No telephone requests will be honored. All information provided will become property of NIST and will not be returned.

Points of Contact:

(Primary) Prateema Carvajal, Contract Specialist, Email: prateema.carvajal@nist.gov

Monica Brown Contracting Officer, Email: moncia.Brown@nist.gov