SSJA - FA875126P0038_Redacted.pdf

Department of the Air Force: Justification for Other Than Full and Open Competition

May 2026 Page 2 of 4May 2026 Page 2 of 4

I. Agency and Contracting Activity (RFO 6.104-1(a)(1)):

AFRL/RFZO

26 Electronic Pkwy Rome, NY 13441

II. Nature and/or description of the action being approved (RFO 6.104-1(a)(2)):

This document approves the award of a firm fixed-price contract on a sole source or basis to Unison Solutions, sole distributor for Warpstone Technologies Supply Chain Threat Intelligence & Remediation software platform in support of the DAF CLOUDworks enterprise. This justification is made on individual basis.

III. Description of supplies/services required to meet agency needs (RFO 6.104-1(a)(3)):

The Software Supply Chain Threat Intelligence & Remediation Platform will be capable of ingesting Software Bills of Materials (SBOMs) and performing deep dependency analysis for any software application type.

including all options. This acquisition is for a license purchase with the duration of one year per option. This license will provide DAF CLOUDworks a threat intelligence platform and software supply chain threat remediation capability.

The contractor shall provide a secure, enterprise-grade Software Supply Chain Threat Intelligence & Remediation Platform and incidental technical support services that meet or exceed the following performance requirements:

1. SBOM ingestion and software artifact inventory.

2. Dependency and transitive dependency analysis.

3. Vulnerability, lifecycle, supplier, and software supply chain risk identification.

4. Artifact-level risk scoring and audit package generation.

5. Threat intelligence correlation and continuous monitoring.

6. Remediation workflow management and vendor coordination.

7. Classified and unclassified operational support, as required.

8. Alignment with applicable DoD Zero Trust software-related control object

IV. Statutory Authority Permitting Other Than Full and Open Competition (RFO 6.104-1(a)(4)):

RFO 12.201-1 Simplified Procedures, 41 U.S.C. 1901

V. Rationale for Use of Authority (RFO 6.104-1(a)(5)):

The Warpstone software platform is available from only one responsible source and no other type of supplies or services will satisfy agency requirements.

Warpstone Technologies is the only company taking a holistic approach to software supply chain risk management that is not restricted to a container-centric focus, thereby delivering much broader visibility and coverage across the entire software ecosystem. The Warpstone software platform enables deep dependency analysis across a diverse array of artifacts, extending coverage beyond containers to include software binaries, libraries, software components, operating systems, firmware, mobile applications, virtual appliances, and virtual machines. This comprehensive visibility greatly enhances defensive cyber capabilities, allowing the Government to evaluate software components using both manufacturer-provided and ecosystem-derived data. Furthermore, Warpstone's novel vulnerability tracking system delivers actionable insights that actively improve security posture and accelerate Zero Trust capabilities. The tool is remediation-focused; rather than merely generating static risk assessments, it empowers the

May 2026 Page 3 of 4May 2026 Page 3 of 4

Government to dynamically manage and mitigate risk throughout the entire enterprise.

VI. Integrated Market Analysis and Efforts to Solicit Competition (RFO 6.104-1(a)(6), (8), and (10)):

A Notice of Proposed Contract Action (NOCA) in the form of a pre-solicitation notice was posted to the SAM.gov website from 18 July 2026 to 3 August 2026 outlining the Government’s intent to make a sole-source award directly to Unison Solutions, Inc. as the sole provider for the required Warpstone Supply Chain Software Platform.

responses were received in response to the NOCA. Upon review by the end-user, none of the responses received offered the technical/performance capabilities of the Warpstone software platform and were therefore determined unable to meet the Government's needs.

VII. Determination of Fair and Reasonable Cost (RFO 6.104-1(a)(7)):

The Contracting Officer is responsible for evaluating, determining, and documenting the anticipated contract cost/price is fair and reasonable in accordance with RFO Subpart 15.4, Contract Pricing.

VIII. Any Other Facts Supporting the Justification (RFO 6.104-1(a)(9)):

In direct correlation with Department of War (DoW) goals this acquisition targets a commercial product that offers a non-proprietary solution to meet organizational goals. This commercial product will enable DAF CLOUDworks to

CUI

May 2026 Page 4 of 4 conduct SBOM analysis and software supply chain risk management for software packaged in all forms. This accelerates DAF CLOUDworks security posture and its requirements for Zero Trust.

IX. Actions to Overcome Barriers to Competition (RFO 6.104-1(a)(11):

The end user will continue to monitor the market in order to identify opportunities to maximize competition in potential future requirements. To the maximum extent practicable other products will once again be evaluated to determine their capability to support future projects.