platform_one_vendor_value_proposition V7.docx
DOCX document 63 KB Posted
- Attached to
- Platform One Software Industry Day
- Solicitation number
- FA8307-SW-SWID
About this file
This is a Request for Information (RFI) and vendor value proposition document for the Department of War's Platform One enterprise DevSecOps initiative. Platform One seeks commercial software vendors capable of integrating into regulated, Zero Trust-aligned environments across Impact Levels 2, 4, and 5 (IL2, IL4, IL5). The initiative requires partners offering capabilities in seven functional areas: CI/CD and supply chain management (secure source code, automated CI/CD, SBOM/OSS processing); container standards (hardened developer tools, SSO/SCIM integration); continuous security (runtime vulnerability scanning, threat modeling, Layer-7 traffic inspection); identity and secrets management (dynamic credential generation, SSL/TLS certificate management, encryption key storage); infrastructure and edge management (FIPS-compliant OS, code-free Kubernetes deployment, remote edge node lifecycle management); business and compliance tools (UI prototyping, CRM/funding tracking, compliance documentation); and chat operations (enterprise-grade, secure, scalable collaboration solutions supporting at least 4,700 active users, with strict P1 architecture compatibility).
The collaborative vendor session is scheduled for October 14-16, 2026, from 0800-1600 daily at The Light Building, 420 Broadway, San Antonio, TX 78205, with virtual attendance available. An "Ask Me Anything" session will be held on September 30, 2026, from 0900-1000 CST. The RFI requests information on alternative software solutions to currently used technologies (including GitLab, Palo Alto, Docker, Mattermost, and others listed), specifically addressing deployment options, feature parity, scalability limitations, and support differences. All software must support on-premises deployment and cannot include SAS software, with the government retaining authority over all digital products. Key contacts include CCTI Coordinating POC Lauren Pauly (Lauren.Pauly@catalystcampus.org), Security POC Torin Hart (torin.hart.3@us.af.mil), Contracting Officer Maj Jamail Walker (jamail.walker.1@us.af.mil), and Chief Logistician Robert Mckeithan (robert.mckeithan.1@us.af.mil). This is strictly for market research and planning purposes; responses are voluntary and will not obligate the government to award a contract.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 889 Representation Form.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Platform One – Enterprise Vendor Value Proposition
PLATFORM ONE
ENTERPRISE VENDOR VALUE PROPOSITION
Request for Information (RFI) & Collaborative Vendor Session
Prepared for the Department of War (DoW) October 2026
1. Executive Summary
Bottom Line Up Front (BLUF): Platform One is the premier enterprise DevSecOps initiative for the Department of War (DoW). We provide secure, compliant, and scalable software factories that empower mission owners to deliver software at the speed of relevance. We actively seek commercial software vendors capable of integrating into our regulated, Zero Trust–aligned environments (IL2, IL4, IL5). We need partners who deliver robust container security, streamlined infrastructure management, DevSecOps tooling, and frictionless workflows to support Authorization to Operate (ATO).
2. Our Mission and the “Why” Platform One acts as the central hub for the DoW’s software supply chain. We partner with vendors to integrate mission-critical capabilities into our enterprise value stream. By joining our ecosystem, vendors enable the DoW to:
Scale Securely: Deploy standardized, secure containers across hybrid clouds, multi-classification environments, and edge nodes.
Accelerate Delivery: Automate and manage diverse digital assets through code-free, accessible deployments.
Ensure Compliance: Align strictly with DoW DevSecOps guidelines, Zero Trust, and Comply2Connect mandates.
Reduce Cognitive Load: Empower users to visually manage Kubernetes environments (like Big Bang) securely.
3. Event Details To facilitate direct alignment, collaboration, and networking, we are hosting a collaborative vendor session:
| Dates: |
| October 14-16, 2026 |
| Hours: |
| 0800-1600 Daily |
| Location: |
| · In person- The Light Building, 420 Broadway, San Antonio, TX 78205 |
· Virtual- Stand by for Zoom Link
4. Core Vendor Capabilities We are seeking capabilities across seven functional areas that directly enhance our DevSecOps infrastructure.
| Capability Area |
| Specific Vendor Needs |
| Mission Impact (The “Why”) |
| CI/CD & Supply Chain |
| Secure source code management, automated CI/CD, artifact distribution, and SBOM/OSS metadata processing. |
| Ensures continuous delivery, enforces compliant practices, and mitigates cyber/legal risks. |
| Container Standards |
| Hardened developer tools, SSO/SCIM integration, and secure container development. |
| Provides supply chain compliance and meets strict DoW security requirements. |
| Continuous Security |
| Runtime vulnerability scanning, threat modeling, Layer-7 traffic inspection, and centralized log aggregation. |
| Enables continuous monitoring, rapid threat response, and Zero Trust/ATO operations. |
| Identity & Secrets |
| Dynamic credential generation, SSL/TLS certificate management, and secure encryption key storage. |
| Ensures secure data transmission and interoperability with DoW PKI. |
| Infrastructure & Edge |
| Reliable OS (FIPS, live patching), code-free Kubernetes deployment, and remote edge node lifecycle management. |
| Supports scalable, compliant deployment across hybrid workloads (IL2, IL4, IL5) and the tactical edge. |
| Business & Compliance |
| Real-time UI prototyping, CRM/funding tracking, and automated compliance documentation tools. |
| Accelerates UI delivery, streamlines partner engagement, and ensures continuous auditability. |
| Chat Ops |
| Enterprise-Grade Platform: A commercially available chat/collaboration solution (e.g., Mattermost or equivalent). |
Secure & Scalable: Must be secure, scalable, and extensible to support users across IL2, IL4, and IL5 environments.
Full Compatibility: Maintain strict compatibility with P1 architecture, DevSecOps workflows, and cybersecurity standards.
User Support: Support a baseline of at least 4,700 active enterprise users.
Ensures DevSecOps Continuity: Sustains the P1 ecosystem by providing a centralized, reliable hub for development and operational collaboration.
Enables Multi-Level Secure Collaboration: Allows DoW mission users to communicate securely across multiple Impact Levels, ensuring the right personnel have access to mission-critical data.
Prevents Mission Disruption: Requires compatibility with existing workflows to eliminate re-engineering, save time, and ensure zero downtime for active operations.
5. The Platform One Vendor Expectation Platform One integrates operational partners, not just software. Vendors must design solutions with these core attributes:
Security by Default: Natively support FIPS encryption, Zero Trust principles, and continuous vulnerability scanning.
Unmatched Interoperability: Integrate cleanly with centralized identity (SSO/SCIM) and existing DevSecOps pipelines.
Scalability Across Classifications: Perform reliably in unclassified (IL2), secure (IL4/IL5) enclaves, and constrained edge nodes.
Accessibility & Automation: Offer intuitive interfaces and visual management layers that abstract Kubernetes complexity.
Form 889: Submitted completed Form 889
This Request for Information (RFI) is issued in accordance with the Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published to obtain information for use by the Air Force Lifecycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio - Lackland, Texas, for market research and planning purposes only. THIS RFI IS NOT A REQUEST FOR PROPOSAL, INVITATION FOR BID, OR AN ANNOUNCEMENT OF A SOLICITATION; IT IS ONLY INTENDED FOR INFORMATION OR PLANNING PURPOSES. There is no bid package or solicitation document associated with this announcement. Response to this RFI is strictly voluntary and will not affect any potential offeror’s ability to submit an offer if a solicitation is released. Any requests for a solicitation package will be disregarded. The government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the government will arise as a result of preparing submissions in response to this RFI and the government’s use of such information. Submittals will not be returned to the sender. Respondents to this RFI may be asked to provide additional information/details based on their initial submittals. As indicated above, this is solely market research for software alternatives. Please be advised that any quote for software that is already in use, quote for alternative software, or any submissions intended for award evaluation should not be included in conjunction with this document. Any input on this document that contains responses for the software already in-use should not be included and should only contain alternative software data/answers. Your responses will only be used for planning purposes. Please address any comments and/or questions you may have regarding this RFI in writing to the listed POC.
Align your product roadmap with these operational realities to become a foundational element of the DoW’s software modernization effort. Partner with Platform One to secure the supply chain and deliver uncompromised capabilities to the warfighter.
6. Alternative License Types What alternative software do you offer that is similar to the software names listed below? Please review the catalog of current technologies:
| Lucid Chart |
| Palo Alto NGRW |
| Oddo |
| Tidelift |
| GitLab Ultimate |
| Palo Alto Twistlock |
| Ubuntu Pro + Support |
| Elastic |
| Hashicorp Vault |
| SonarQube |
| Atlassian |
| SD Elements |
| Anchore |
| Analyzers |
| AskSage |
| Docker |
| Kubecost |
| Parabol |
| DigiCert |
| Lockdown Enterprise |
| Sonatype Nexus |
| Mattermost |
| Regscale |
| Harpoon |
Red Hat Enterprise Linux Server w/ Satellite
Information Requested from Respondents Deployment Options & Differences: Please provide details on available options, such as enterprise, cloud-managed, or open-source/community editions. For each alternative software option/solution, please provide how it differs from the listed license. All software would need to be on premises deployment, and cannot support SAS software. The government would need to retain authority of all digital products.
Feature Parity & Restrictions: For each alternative software option/solution, please provide how it is similar to the listed license. Please specify any feature restrictions, scalability limitations, or support differences among the licenses (e.g., data retention, search query limits, or alerting capabilities).
“Ask Me Anything”
Please be advised that an "Ask Me Anything" (AMA) session will be held two weeks prior to our upcoming event.
Mark your calendar for September 30, 2026.
| AMA Location |
| Virtual (Link to be provided) |
| AMA Session |
| September 30, 2026 |
| AMA Time |
| 0900 CST -1000 CST |
Point of Contact
· CCTI Coordinating POC: Lauren Pauly Lauren.Pauly@catalystcampus.org
· Security: Torin Hart torin.hart.3@us.af.mil
· Contracting Officer (CO): Maj Jamail Walker jamail.walker.1@us.af.mil
· Chief Logistician / Product Support Manager: Robert Mckeithan robert.mckeithan.1@us.af.mil
· Alternative Logistician POCs: Crystal Pena crystal.pena.1@us.af.mil
File details come from the government source that posted it. Updated .