Regscale or Equal for SDN & SDN-S

The Department of the Air Force Materiel Command Air Force Sustainment Center intends to solicit RegScale or an equivalent Governance, Risk, and Compliance (GRC) platform for Software-Defined Networking (SDN) and SDN-Secret architectures, with sources-sought responses due July 24, 2026. This is a firm-fixed-price, one-time purchase order with no set-aside. Place of performance is Tinker Air Force Base, Oklahoma.

The platform must manage compliance for major weapon systems including Mission Planning, E3, E7, ATCALS, F-16, and A-10. Minimum technical requirements include API-driven architecture with artificial intelligence, native NIST Open Security Controls Assessment Language (OSCAL) support, automated evidence collection from AWS, Azure, Jira, Tenable, and DevSecOps pipelines, AI-powered control gap analysis, embedded Continuous Compliance Automation in DevSecOps, automation of all NIST Risk Management Framework steps to support continuous authorization, quantitative risk analysis using Monte Carlo simulations, third-party risk management capabilities, and immutable audit trails. The contractor shall provide standard commercial warranty on all software licenses.

All contractor personnel performing work at the USAF facility must be U.S. citizens; foreign nationals are not permitted. No security clearance is required. NAICS code is 541511 (Custom Computer Programming Services) with a $34 million size standard. Responses to the Contractor Capability Survey must address facility capabilities, key personnel qualifications, quality assurance processes, on-time completion rates, project capacity, proposed timelines, established pricing, workforce consistency, warranty terms, and return processes. Responses must be submitted via email to Anthony Dollard at anthony.dollard@us.af.mil by close of business July 24, 2026. Both large and small businesses are invited; joint ventures and teaming arrangements are permitted.