HP_Fortify_Software_Brand_Name_Only_Redacted.pdf

KPT 4200-02

NUWC Keyport 4200/09 (Rev 5-2013)

X JUSTIFICATION FOR SOLE SOURCE (Simplified Acquisitions $2,500 TO $l50K)

☐ JUSTIFICATION FOR LIMITED SOURCE/BRAND NAME (GWAC TO $150K)

The service or material listed on (PR Number) _1300650437___________ is sole/limited source and competition/fair opportunity is precluded for reasons indicated below. There are no substitutes available for this material/service.

Restricted to the following source. Provide original manufacturer's name. (If a sole source manufacturer distributes via dealers, ALSO provide dealer information.)

Manufacturer: HPE Manufacturer POC & Phone #: HPE Software at Carahsoft Mfr. Address: Carahsoft Technology Corp.

HPE Software Team 1860 Michael Faraday Drive Suite 100 Reston, Virginia 20190

Manufacturers Dealer/Rep:

Dealer/Rep Address/Phone Number 703-673-3543

Description of the item or service required, the estimated cost, and required delivery date.

$85,424.58 CODE ANALYZER HP Fortify Static Code Analyzer 12 SEP 2017 ______________________________

Specific characteristics of the material or service that limit the availability to a sole/limited source (unique features, function of the item, etc.). Describe in detail why only this suggested source can furnish the requirements to the exclusion of other sources.

CODE ANALYZER HP Fortify Static Code Analyzer (SCA) helps verify that your software is trustworthy, reduce costs, increase productivity and implement secure coding best practices. Fortify SCA, static application security testing (SAST) software, scans source code, identifies root causes of software security vulnerabilities and correlates and prioritizes results. Giving you line of code guidance for closing gaps in your security. To verify that the most serious issues are addressed first, it correlates and prioritizes results to deliver an accurate, risk ranked list of issues. Code Analyzer HP will be used in the

Lab. At this point in the lifecycle, changing software would invalidate the network accreditation and would require extensive retesting by the

. Development $10K; Verification $150K; Certification would need approval by , which would take months and is highly unlikely to be approved for one user (Naval Undersea Warfare Center Keyport).

X____The requested material or service represents the minimum requirements of the government

FILL IN ALL APPLICABLE BLANKS BELOW

The material/service must be compatible in all aspects (form, fit and function) with existing systems presently installed. Describe the equipment you have now and how the new item/service must coordinate, connect, or interface with the existing system.

This software will be installed in the Lab.

will be communicating with the via this lab. The under the lists the network configuration and states “Modification of the hardware, software, firmware, connectivity or physical location without prior coordination with will invalidate this approval". Network owner has indicated via , we would not be authorized to connect to their network with untrusted software. Since this is a classified network, ensuring there is a level of trust within the software components prior to connecting to the network is required to ensure the security of the network is maintained.

KPT 4200-02

NUWC Keyport 4200/09 (Rev 5-2013)

A patent, copyright, or proprietary data limits competition/fair opportunity. The proprietary data is:

-These are “direct replacements” parts/components for existing equipment. Identify and briefly describe the existing equipment below:

-Other information to support a sole/limited-source buy:

I CERTIFY THAT STATEMENTS CHECKED, AND INFORMATION PROVIDED ABOVE, ARE COMPLETE AND

CORRECT TO THE BEST OF MY KNOWLEDGE. I UNDERSTAND THAT THE PROCESSING OF THIS

SOLE/LIMITED-SOURCE JUSTIFICATION PRECLUDES THE USE OF FULL AND OPEN COMPETITION/FAIR

OPPORTUNITY.

Signature_______________________________ Activity________________________________

Title___________________________________ Date____________________________________

Contracting Officer Signature________________________________ Date__________________

SAP/GWAC Sole/Limited Source