platform_one_vendor_value_proposition V7.docx

DOCX document 63 KB Posted

Attached to
Platform One Software Industry Day
Solicitation number
FA8307-SW-SWID
Issued by

About this file

This is a Request for Information (RFI) and vendor value proposition document for the Department of War's Platform One enterprise DevSecOps initiative. Platform One seeks commercial software vendors capable of integrating into regulated, Zero Trust-aligned environments across Impact Levels 2, 4, and 5 (IL2, IL4, IL5). The initiative requires partners offering capabilities in seven functional areas: CI/CD and supply chain management (secure source code, automated CI/CD, SBOM/OSS processing); container standards (hardened developer tools, SSO/SCIM integration); continuous security (runtime vulnerability scanning, threat modeling, Layer-7 traffic inspection); identity and secrets management (dynamic credential generation, SSL/TLS certificate management, encryption key storage); infrastructure and edge management (FIPS-compliant OS, code-free Kubernetes deployment, remote edge node lifecycle management); business and compliance tools (UI prototyping, CRM/funding tracking, compliance documentation); and chat operations (enterprise-grade, secure, scalable collaboration solutions supporting at least 4,700 active users, with strict P1 architecture compatibility).

The collaborative vendor session is scheduled for October 14-16, 2026, from 0800-1600 daily at The Light Building, 420 Broadway, San Antonio, TX 78205, with virtual attendance available. An "Ask Me Anything" session will be held on September 30, 2026, from 0900-1000 CST. The RFI requests information on alternative software solutions to currently used technologies (including GitLab, Palo Alto, Docker, Mattermost, and others listed), specifically addressing deployment options, feature parity, scalability limitations, and support differences. All software must support on-premises deployment and cannot include SAS software, with the government retaining authority over all digital products. Key contacts include CCTI Coordinating POC Lauren Pauly (Lauren.Pauly@catalystcampus.org), Security POC Torin Hart (torin.hart.3@us.af.mil), Contracting Officer Maj Jamail Walker (jamail.walker.1@us.af.mil), and Chief Logistician Robert Mckeithan (robert.mckeithan.1@us.af.mil). This is strictly for market research and planning purposes; responses are voluntary and will not obligate the government to award a contract.

View the file

Other files

File Type Posted
889 Representation Form.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Platform One – Enterprise Vendor Value Proposition

PLATFORM ONE

ENTERPRISE VENDOR VALUE PROPOSITION

Request for Information (RFI) & Collaborative Vendor Session

Prepared for the Department of War (DoW) October 2026

1. Executive Summary

Bottom Line Up Front (BLUF): Platform One is the premier enterprise DevSecOps initiative for the Department of War (DoW). We provide secure, compliant, and scalable software factories that empower mission owners to deliver software at the speed of relevance. We actively seek commercial software vendors capable of integrating into our regulated, Zero Trust–aligned environments (IL2, IL4, IL5). We need partners who deliver robust container security, streamlined infrastructure management, DevSecOps tooling, and frictionless workflows to support Authorization to Operate (ATO).

2. Our Mission and the “Why” Platform One acts as the central hub for the DoW’s software supply chain. We partner with vendors to integrate mission-critical capabilities into our enterprise value stream. By joining our ecosystem, vendors enable the DoW to:

Scale Securely: Deploy standardized, secure containers across hybrid clouds, multi-classification environments, and edge nodes.

Accelerate Delivery: Automate and manage diverse digital assets through code-free, accessible deployments.

Ensure Compliance: Align strictly with DoW DevSecOps guidelines, Zero Trust, and Comply2Connect mandates.

Reduce Cognitive Load: Empower users to visually manage Kubernetes environments (like Big Bang) securely.

3. Event Details To facilitate direct alignment, collaboration, and networking, we are hosting a collaborative vendor session:

Dates:
October 14-16, 2026
Hours:
0800-1600 Daily
Location:
· In person- The Light Building, 420 Broadway, San Antonio, TX 78205

· Virtual- Stand by for Zoom Link

4. Core Vendor Capabilities We are seeking capabilities across seven functional areas that directly enhance our DevSecOps infrastructure.

Capability Area
Specific Vendor Needs
Mission Impact (The “Why”)
CI/CD & Supply Chain
Secure source code management, automated CI/CD, artifact distribution, and SBOM/OSS metadata processing.
Ensures continuous delivery, enforces compliant practices, and mitigates cyber/legal risks.
Container Standards
Hardened developer tools, SSO/SCIM integration, and secure container development.
Provides supply chain compliance and meets strict DoW security requirements.
Continuous Security
Runtime vulnerability scanning, threat modeling, Layer-7 traffic inspection, and centralized log aggregation.
Enables continuous monitoring, rapid threat response, and Zero Trust/ATO operations.
Identity & Secrets
Dynamic credential generation, SSL/TLS certificate management, and secure encryption key storage.
Ensures secure data transmission and interoperability with DoW PKI.
Infrastructure & Edge
Reliable OS (FIPS, live patching), code-free Kubernetes deployment, and remote edge node lifecycle management.
Supports scalable, compliant deployment across hybrid workloads (IL2, IL4, IL5) and the tactical edge.
Business & Compliance
Real-time UI prototyping, CRM/funding tracking, and automated compliance documentation tools.
Accelerates UI delivery, streamlines partner engagement, and ensures continuous auditability.
Chat Ops
Enterprise-Grade Platform: A commercially available chat/collaboration solution (e.g., Mattermost or equivalent).

Secure & Scalable: Must be secure, scalable, and extensible to support users across IL2, IL4, and IL5 environments.

Full Compatibility: Maintain strict compatibility with P1 architecture, DevSecOps workflows, and cybersecurity standards.

User Support: Support a baseline of at least 4,700 active enterprise users.

Ensures DevSecOps Continuity: Sustains the P1 ecosystem by providing a centralized, reliable hub for development and operational collaboration.

Enables Multi-Level Secure Collaboration: Allows DoW mission users to communicate securely across multiple Impact Levels, ensuring the right personnel have access to mission-critical data.

Prevents Mission Disruption: Requires compatibility with existing workflows to eliminate re-engineering, save time, and ensure zero downtime for active operations.

5. The Platform One Vendor Expectation Platform One integrates operational partners, not just software. Vendors must design solutions with these core attributes:

Security by Default: Natively support FIPS encryption, Zero Trust principles, and continuous vulnerability scanning.

Unmatched Interoperability: Integrate cleanly with centralized identity (SSO/SCIM) and existing DevSecOps pipelines.

Scalability Across Classifications: Perform reliably in unclassified (IL2), secure (IL4/IL5) enclaves, and constrained edge nodes.

Accessibility & Automation: Offer intuitive interfaces and visual management layers that abstract Kubernetes complexity.

Form 889: Submitted completed Form 889

This Request for Information (RFI) is issued in accordance with the Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published to obtain information for use by the Air Force Lifecycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio - Lackland, Texas, for market research and planning purposes only. THIS RFI IS NOT A REQUEST FOR PROPOSAL, INVITATION FOR BID, OR AN ANNOUNCEMENT OF A SOLICITATION; IT IS ONLY INTENDED FOR INFORMATION OR PLANNING PURPOSES. There is no bid package or solicitation document associated with this announcement. Response to this RFI is strictly voluntary and will not affect any potential offeror’s ability to submit an offer if a solicitation is released. Any requests for a solicitation package will be disregarded. The government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the government will arise as a result of preparing submissions in response to this RFI and the government’s use of such information. Submittals will not be returned to the sender. Respondents to this RFI may be asked to provide additional information/details based on their initial submittals. As indicated above, this is solely market research for software alternatives. Please be advised that any quote for software that is already in use, quote for alternative software, or any submissions intended for award evaluation should not be included in conjunction with this document. Any input on this document that contains responses for the software already in-use should not be included and should only contain alternative software data/answers. Your responses will only be used for planning purposes. Please address any comments and/or questions you may have regarding this RFI in writing to the listed POC.

Align your product roadmap with these operational realities to become a foundational element of the DoW’s software modernization effort. Partner with Platform One to secure the supply chain and deliver uncompromised capabilities to the warfighter.

6. Alternative License Types What alternative software do you offer that is similar to the software names listed below? Please review the catalog of current technologies:

Lucid Chart
Palo Alto NGRW
Oddo
Tidelift
GitLab Ultimate
Palo Alto Twistlock
Ubuntu Pro + Support
Elastic
Hashicorp Vault
SonarQube
Atlassian
SD Elements
Anchore
Analyzers
AskSage
Docker
Kubecost
Parabol
DigiCert
Lockdown Enterprise
Sonatype Nexus
Mattermost
Regscale
Harpoon

Red Hat Enterprise Linux Server w/ Satellite

Information Requested from Respondents Deployment Options & Differences: Please provide details on available options, such as enterprise, cloud-managed, or open-source/community editions. For each alternative software option/solution, please provide how it differs from the listed license. All software would need to be on premises deployment, and cannot support SAS software. The government would need to retain authority of all digital products.

Feature Parity & Restrictions: For each alternative software option/solution, please provide how it is similar to the listed license. Please specify any feature restrictions, scalability limitations, or support differences among the licenses (e.g., data retention, search query limits, or alerting capabilities).

“Ask Me Anything”

Please be advised that an "Ask Me Anything" (AMA) session will be held two weeks prior to our upcoming event.

Mark your calendar for September 30, 2026.

AMA Location
Virtual (Link to be provided)
AMA Session
September 30, 2026
AMA Time
0900 CST -1000 CST

Point of Contact

· CCTI Coordinating POC: Lauren Pauly Lauren.Pauly@catalystcampus.org

· Security: Torin Hart torin.hart.3@us.af.mil

· Contracting Officer (CO): Maj Jamail Walker jamail.walker.1@us.af.mil

· Chief Logistician / Product Support Manager: Robert Mckeithan robert.mckeithan.1@us.af.mil

· Alternative Logistician POCs: Crystal Pena crystal.pena.1@us.af.mil

File details come from the government source that posted it. Updated .