DOJ Software as a Service (SaaS) log management / Security Information and Event Management (SIEM) solution

The Department of Justice Offices Boards and Divisions is issuing a Request for Information to solicit market intelligence on FedRAMP Moderate, High-Ready, and/or High-authorized cloud-based Software as a Service (SaaS) log management and Security Information and Event Management (SIEM) solutions, with responses due by August 28, 2026. This is market research only and does not constitute a commitment to procure.

The solution must replace DOJ's current on-premises SIEM system and support compliance with OMB Memorandum M-26-14 regarding federal logging and network visibility requirements. DOJ requires a complete, single-vendor solution without third-party dependencies, including professional services for migration, user training, and comprehensive technical documentation. The vendor must support ingestion of up to 60TB+ of data daily from diverse sources including Windows, Linux, network devices, endpoints, cloud services (AWS, Azure, O365 GCC High), and operational technology; provide multiple search capabilities (natural language, SQL, entity-centric, AI-augmented); deliver scalable performance with ability to execute 120,000 scheduled searches in five-minute intervals and 2,000 concurrent searches without performance degradation; include encryption of data at rest and in transit; support role-based access controls, SAML authentication via Okta, and comprehensive audit logging; and offer workflow automation, incident management, user behavior analytics with AI/ML capabilities, and data retention of minimum six months searchable plus six months cold storage.

DOJ estimates a 90-day assessment/ATT/ATO period and 180-day minimum migration and training timeline post-award. Responses are limited to 15 pages and must include a two-page capability statement with SLA tables and government references demonstrating current successful deployments. Submit responses to Contracting Officer Raven Childs at raven.r.childs@usdoj.gov. All response costs are vendor-borne. DOJ has not finalized acquisition strategy decisions regarding small business set-asides or phased implementation approaches.