SATPC0037612 Tab 04 4 SOW_Redacted.pdf
PDF 100 KB Posted
- Attached to
- Mend AppSec Software License Renewal Federal contract opportunity
- Solicitation number
- 80NSSC25895426Q
About this file
This Statement of Work (SOW) outlines NASA Ames Research Center's requirement for 30 Mend AppSec Platform licenses. The platform includes Mend Static Application Security Testing solution that detects vulnerabilities in custom source code, featuring a comprehensive suite of security tools including OSS vulnerability scanning for over 200 technologies, source file matching, license compliance, malicious package protection, container scanning, and CVE reachability analysis.
The solution includes key integrations with SCM repositories (Azure DevOps, Bitbucket, GitHub, GitLab), Kubernetes, cloud registries, and issue tracking systems (Jira). Additional features comprise SBOM generation, runtime analysis, automated remediation via Renovate, API integration, SSO/SAML support, and premium support services. The period of performance is from February 27, 2025 to February 26, 2025 (note: appears to be a typographical error in dates), with work to be performed at NASA Ames Research Center. The part number for this platform is MD-APSC-PLT.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| SATPC0037612 Tab 07 Capability Statement Commercial.pdf |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
STATEMENT OF WORK
1. Objective/Requirements
NASA Ames Research Center has a requirement for Mend AppSec License Renewal.
2. Characteristics, Scope, and Specs
Qty Description Part #
Mend AppSec Platform
Mend Static Application Security Testing solution tool that detects vulnerabilities within application’s custom source code.
• A single web user-interface for managing all engines (SCA/SAST/Container)
• OSS vulnerability scanning for over 200 technologies, including source file matching
• OSS license compliance
• Malicious Package Protection
• Container Scanning for open source vulnerabilities
• CVE reachability analysis
• Complementing Exploitation maturity indications (EPSS)
• SBOM generation
• Custom, first party source code protection
• Runtime analysis information
• Kubernetes integration
• Cloud registries integration
• SCM repository integrations (Azure, DevOps, Bitbucket, GitHub, GitLab)
• Dashboard, alerts, reporting and workflow automation
• Native access with IDEs
• SSO/SAML support
• Customer Success Management
• Issue tracking integrations (Jira)
• Automated remediation and suggested fixes (Renovate)
• API integration
• Mend Premium Support
MD-APSC-PLT
3. Place of Performance
NASA Ames Research Center
4. Period of Performance
2/27/25 – 2/26/25
File details come from the government source that posted it. Updated .