RFI_DigiCert_FY26_v2.xlsx
XLSX spreadsheet 29 KB Posted
- Solicitation number
- FA830726RB031
About this file
This is a Request for Information (RFI) issued by the Air Force Life Cycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), located at Joint Base San Antonio-Lackland, Texas. The RFI seeks market research on software alternatives for Platform One (P1) to create and maintain software threat models and secure compliant code in support of the United States Air Force Development Security Operations (DevSecOps) environment utilizing cloud flexibility. The Government is specifically interested in solutions that provide end-to-end security through Public Key Infrastructure (PKI) and digital certificates, with a focus on alternative software options rather than the currently-used solution. Responses must be submitted using the attached Excel file to the listed point of contact.
The RFI requires vendors to address three primary sections: software offerings and licensing options; how proposed solutions meet stated requirements; and specific capability alignment against a detailed requirements matrix. Vendors must also provide estimated transition and training costs, pricing plans (monthly, trial, or annual with volume discount information), and clarify willingness to enter into contracts with a base year plus up to four one-year options. Key requirements include certificate issuance for SSL communication, support through the DoD PKI Interoperability program, compliance with federal PKI standards and policies, automation with real-time compliance and security features, and built-in compliance templates for hardening virtual machine and containerized environments. This is market research only; responses will be used for planning purposes and do not constitute a formal solicitation for award.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
T&C and Contact Information
| Note: Please read and complete the middle portion. | |
| 1 | This solicitation is issued in accordance with Federal Acquisition Regulation (FAR) Part 12, Acquisition of Commercial Products and Commercial Services, and in conjunction with FAR Part 13, 14, or 15 procedures as specified in the accompanying solicitation documents. The Air Force Life Cycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio–Lackland, Texas, hereby requests proposals from responsible and qualified offerors for the commercial products and/or services described in this solicitation. |
This announcement constitutes a formal request for information (RFI). The Government intends to award a contract resulting from this solicitation to the offeror whose proposal represents the best value to the Government, as determined in accordance with the evaluation criteria set forth herein. Offerors are responsible for reviewing all solicitation provisions, clauses, attachments, and amendments. Submission of a proposal shall signify the offeror’s acknowledgment, understanding, and acceptance of all terms and conditions included in this solicitation.
The Government anticipates using streamlined procedures authorized under FAR Part 12 to the maximum extent practicable. Offerors must ensure that all proposed products and services meet the definition of “commercial” as defined in FAR 2.101.
2 This announcement constitutes a formal solicitation for commercial products and/or commercial services in accordance with FAR Part 12. Offerors are invited to submit proposals in response to the requirements identified in this solicitation. All submitted proposals shall be prepared in accordance with the instructions, terms, and conditions provided herein and in any accompanying attachments or amendments.
This solicitation is a request for proposals and may result in the award of a contract. The Government reserves the right to award without discussions, to hold discussions if necessary, or to make no award depending on the needs of the Government and the quality of the proposals received. Offerors are responsible for monitoring this solicitation for any amendments or updates.
By submitting a proposal, offerors acknowledge and understand that the Government is not obligated to award a contract and that the preparation of proposals is at the offeror’s own expense. The Government will not pay for any costs associated with preparing or submitting proposals, participating in discussions, or providing additional information.
| Company Name: | |
| CAGE Code: | |
| Address: | |
| POC Name: | |
| POC E-mail: | |
| POC Phone Number: | |
| 3 | As indicated above, this is solely market research for software alternatives. Please be advised that any quote for software that is already in use, quote for alternative software, or any submissions intended for award evaluation should not be included in conjunction with this document. Any input on this document that contains responses for the software already in-use should not be included and should only contain alternative software data/answers. Your responses will only be used for planning purposes. Please address any comments and/or questions you may have regarding this RFI in writing to the listed POC. |
RFI Q&A
| Description: |
| The purpose of this Government purchase is to provide Platform One (P1) the ability to create and maintain software threat models and secure compliant code in support of the United States Air Force (USAF) Development Security Operations (DevSecOps) while utilizing the flexibility of the cloud. Solution must provide end to end security through Public Key Infrastructure (PKI) and digital certificates necessary for the P1 software environment. |
Note: This document is only interested in alternative software. All three sheets in this document is to be completed.
| Alternative License Types: | |
| 1 | What software do you offer that can fulfill these requriements? |
(Please provide details on available options, such as enterprise, cloud-managed, or open-source/community editions.) [ENTER ANSWER HERE]
2 For each software option/solution, please provide how it meets the requirements.
(Please identify core features or capabilities that are shared across all options, such as log aggregation, visualization tools, and monitoring capabilities, regardless of the license tier type.) [ENTER ANSWER HERE]
3 For each software option/solution, clarify how it meets our requirements per the Requirements Capability Sheet (Sheet 2).
(Please highlight specific ways in which each software, if mulitple, can address our operational, security, and compliance needs, particularly in areas like multi-environment visibility, role-based access control, and support for compliance auditing.) [ENTER ANSWER HERE]
| Pricing Information: | |
| 1 | For each software, please provide estimated transition and training costs and schedule for both transitioning to your proposed solution. |
(Include details on onboarding costs, consulting, or configuration support required for a smooth transition. Specify any training options available, such as workshops, online courses, or documentation resources, and their associated costs.) [ENTER ANSWER HERE]
2 For each software, please provide any price plans associated such as monthly, trial, annual.
(Indicate if discounts are offered for longer-term contracts or high-volume deployments. For cloud-managed options, provide cost breakdowns for storage, query processing, and other usage-based charges.) [ENTER ANSWER HERE]
| Other Considerations: | |
| 1 | Are there any additional features or benefits associated with the software that we should consider? |
(For example, are advanced analytics, machine learning-based anomaly detection, or pre-built integrations with other monitoring tools included at higher licensing tiers? - Please clarify any value-added services, such as dedicated account support, proactive health checks, or best-practice workshops, that come with certain licenses tiers.) [ENTER ANSWER HERE]
2 Is your company willing to enter into contracts with a base year with up to four one-year options? If not, how many years is your company willing to agree to?
(For longer-term contracts, specify any guarantees on pricing, renewal terms, or opportunities to adjust the contract scope to accommodate potential changes in our data volume or monitoring requirements.) [ENTER ANSWER HERE]
Requirements Capability Sheet
| Software Name: | [TYPE NAME HERE] | ||||
| Requirement: | Ready on Day 1 | Future Capability | Estimated date of Capability | Comments | |
| 1 | Maintains a secure network environment that enables encryption and digital signature capabilities across varied applications | FALSE | FALSE | This Column is meant for the vendor to have space to answer the questions in more detail. | |
| 2 | Provides certificate issuance to support Secure Sockets Layer (SSL) communication (encryption and server identity validation) between applications/servers and end users | FALSE | FALSE | ||
| 3 | SSL certs for P1 must meet a certain assurance criterion and be supported through the DoD PKI Interoperability program to ensure secure access to internal systems | FALSE | FALSE | ||
| 4 | Assisted in writing global PKI standards and Federal PKI policy and has deployed our mature, industry-leading solutions throughout the Federal government and in government agencies | FALSE | FALSE | ||
| 5 | End to end security to maintain the security requirements necessary for the Continuous Authorization to Operate (cATO) in support of its support mission for DoD customers. | FALSE | FALSE | ||
| 6 | Comprehensive security controls help meet compliance requirements across virtualization, public cloud, and containers | FALSE | FALSE | ||
| 7 | Use of High Assurance SSL Certificates to support its applications and servers to support P1's operating mode | FALSE | FALSE | ||
| 8 | Provide automation with real-time compliance and security features | FALSE | FALSE | ||
| 9 | Policy, visibility, and administrative guardrails, establishing a baseline that can constantly monitor deployments | FALSE | FALSE | ||
| 10 | Built-in compliance templates for hardening virtual machine and containerized environments | FALSE | FALSE |
File details come from the government source that posted it. Updated .