TetrateJARedacted.pdf

PDF 278 KB Posted

Attached to
Tetrate Istio Software Licenses
Solicitation number
SP470126Q0211
Issued by

About this file

This is a Justification and Approval (J&A) document for procurement of Tetrate.Itsio Software and licenses without full and open competition.

The Defense Logistics Agency (DLA) Contracting Services Office in Philadelphia is procuring Tetrate.Itsio DevSecOps subscription software and licenses through a nine-month firm fixed price (FFP) order commencing September 30, 2026. The procurement will be solicited as a small business set-aside acquisition posted to SEWP (Systems and Services Program), with the total estimated contract value redacted in the document. The requirement is for Tetrate vendor version of Isito Cloud Native Computing Foundation (CNCF) software with Federal Information Processing Standards (FIPS) compliant libraries to support the DevSecOps platform's security requirements. All versions are maintained in the Ironbank (trusted source) and require a licensed version with continuous patching for CVE findings.

The justification for other than full and open competition is based on statutory authority 10 U.S.C. 2304(c)(1) and FAR 6.302-1, citing Tetrate.Itsio as the only responsible source meeting agency requirements. The software provides a FIPS-certified Kubernetes Ingress controller and service mesh that replaces the existing Nginx Ingress Controller, which lacks FIPS support and service mesh capabilities. Market research was conducted via SEWP, and all authorized Tetrate resellers will receive solicitation opportunities. The contracting officer determined pricing will be fair and reasonable using FAR 15.404-1 price analysis techniques, including comparison of proposed prices, competitive published price lists, and market research pricing.

View the file

Other files

File Type Posted
BoM - FY26 Tetrate Istio Software.xlsx XLSX spreadsheet
SP470126Q0211.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

CUI

DLA Contracting Services Office SUBJECT: J&A – Tetrate.Itsio Software and Licenses

CUI | Source Selection Sensitive Information – See FAR 2.101 & 3.104

The required subscription software and licenses will be procured using a nine month firm fixed price (FFP) order commencing on 30 September 2026. The total estimated contract value of this requirement is and will be funded utilizing FY26 funds.

4. IDENTIFICATION OF STATUTORY AUTHORITY PERMITTING OTHER THAN

FULL AND OPEN COMPETITION:

The statutory authority permitting other than full and open competition is 10 U.S.C. 2304(c)(1), as implemented by FAR 6.302-1 “Only one Responsible Source and no other supplies or services will satisfy agency requirements”. Tetrate.io Software and licenses for DevSecOps subscription software is a brand name product of Tetrate.io. Use of this brand name description in the acquisition is essential to the Government’s requirements, thereby precluding consideration of a product of another company. A brand name item peculiar to Tetrate.Itsio Software and licenses for DevSecOps is essential to the Government’s requirement because other products do not meet or cannot be modified to meet the Agency’s needs without assuming unnecessary operational risks.

5. DEMONSTRATION THAT THE PROPOSED CONTRACTOR’S UNIQUE

QUALIFICATIONS OR THE NATURE OF ACQUISITION REQUIRES USE OF CITED

AUTHORITY:

This acquisition is restricted to one brand name or product, Tetrate.Itsio Software and licenses for DevSecOps Subscription Software.

Tetrate.Istio software provides a licensed Kubernetes Ingress controller and service mesh that is FIPs certified. It replaces the existing Nginx Ingress Controller which does not support FIPS nor provide any service mesh capabilities.

All versions are in the Ironbank and maintain the latest four versions continuously patched for CVE findings and do require a licensed version.

Failure to acquire the software will result in the DevSecOps Platform not being compliant with security requirements mandated by the Department of Defense (DoD) and DLA, which could lead to the loss of the Programs Authority to Operate (ATO).

6. DESCRIPTION OF EFFORTS MADE TO ENSURE THAT OFFERS ARE

SOLICITED FROM AS MANY POTENTIAL SOURCES AS IS PRACTICABLE:

Market research was conducted on SEWP. All authorized resellers will be given an opportunity to submit an offer.

7. DETERMINATION BY THE CONTRACTING OFFICER THAT THE

ANTICIPATED COST TO THE GOVERNMENT WILL BE FAIR AND REASONABLE:

As the Contracting Officer, I hereby determine that pricing will be fair and reasonable based on pricing analysis in accordance with FAR 15.404-1. It is anticipated that the Government will use various price analysis techniques including, but not limited to: 1) comparison of proposed prices received in response to the solicitation (FAR 15.404-l(b)(2)(i)); 2) comparison with competitive published price lists (FAR 15.404-l(a)(2)(iv)); and 3) comparison of proposed prices within prices obtained through market research of the same or similar items (FAR l 5.404- l(b)(2)(vi)) in order to obtain a fair and reasonable price. The contracting officer will determine prices fair and reasonable prior to award using price history, IGCE, and published price lists (if available).

8. DESCRIPTION OF THE MARKET RESEARCH CONDUCTED AND THE

RESULTS:

Market research was conducted via SEWP for DevSecOps subscription software. However, Tetrate.io may have authorized resellers of its products by the time the RFQ is posted. DLA has and continues to exercise competition as often as possible and is required to conduct ongoing reviews to keep abreast of new technology, both in industry and in the Government as a continuing effort within DLA. DLA always uses a variety of vendors, manufacturers, and contracts to fulfill its requirements and will continue its practice of surveying the market to ensure full and open competition.

9. CERTIFICATIONS:

Technical/Requirements Certification:

File details come from the government source that posted it. Updated .