Request for Information: Automated Cryptographic Discovery and Inventory (ACDI) Tool
Closed Pre-Solicitation Posted
- Solicitation number
- 7571TE26R00001
- Agency
- Not on record
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Washington, District of Columbia 20201, United States
Notice details come from SAM.gov. Updated .
About this opportunity
The U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer, is issuing a Request for Information regarding commercial Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery, inventory management, and post-quantum cryptography transition planning, with responses due by June 5, 2026, at 12:00 PM ET.
This RFI is for market research and planning purposes only and does not commit the Government to issue a solicitation, award a contract, or pay costs incurred in responding. HHS seeks capability statements or white papers addressing ACDI solutions deployable across enterprise IT environments exceeding 500,000 endpoints and over 900 IT systems. The solution must support discovery across on-premises data centers, cloud environments (Azure, AWS, GCP), and hybrid deployments. FedRAMP High certification is required for cloud-based solutions. Discovery capabilities must encompass network communications, TLS implementations, endpoints and servers, applications and services, cloud environments and containers, virtual machines, data-at-rest systems, firmware, source code, executable files, and third-party artifacts. The tool must identify Post-Quantum Cryptography algorithms and hybrid cryptography within certificates, with a target PQC migration timeline of 2035, and generate a Cryptographic Bill of Materials meeting OMB Memorandum M-23-02 requirements. HHS is interested in integration with Microsoft PKI, Active Directory, CDM, and SIEM platforms. SaaS deployments are permitted. The RFI explicitly excludes classified or air-gapped networks, and PQC migration planning and remediation activities are outside scope. Contract Specialist Jordan Neal (jordan.neal@hhs.gov) and Contracting Officer Julie Rodriguez (julie.rodriguez@hhs.gov) accept written questions by June 1, 2026, at 12:00 PM ET. Late responses will not be accepted.
Notice text
3 versions
Update #3 · Latest ·
This Request for Information (RFI) is issued by the U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer (OCIO), Office of Information Security (OIS), for planning and market research purposes only. This RFI is NOT a Request for Proposal (RFP), Request for Quote (RFQ), or an Invitation for Bid (IFB), and does not commit the Government to issue a solicitation, award a contract, or pay any costs incurred in the preparation of a response. All information submitted in response to this RFI is voluntary.
The Government seeks information from industry regarding commercial or commercially available Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery and inventory management. Additionally, the Government requests feedback to the SOO to help us refine our objectivesAll information regarding this RFI, including the Government’s requirements and requested response information, can be found in the attached documents.
Questions regarding this announcement shall be submitted in writing via e-mail to Contract Specialist Jordan Neal at jordan.neal@hhs.gov and Contracting Officer Julie Rodriguez at julie.rodriguez@hhs.gov by June 1, 2026, at 12:00 PM ET. Verbal questions will NOT be accepted. Questions shall NOT contain proprietary, sensitive, or classified information. The Government does not guarantee that questions received after this date and time will be answered.
Interested parties are requested to respond with a capability statement or white paper. Responses are due no later than June 5, 2026, at 12:00 PM ET and shall be submitted via e-mail to Jordan Neal at jordan.neal@hhs.gov and Julie Rodriguez at julie.rodriguez@hhs.gov. Late responses will not be accepted.
All responses shall include the solicitation number and company name in the subject line of the e-mail submission. Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. All submissions become Government property and will not be returned.
Amendment 01
- Posted Question & Response Document for Vendor Inquiries
Update #2 ·
This Request for Information (RFI) is issued by the U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer (OCIO), Office of Information Security (OIS), for planning and market research purposes only. This RFI is NOT a Request for Proposal (RFP), Request for Quote (RFQ), or an Invitation for Bid (IFB), and does not commit the Government to issue a solicitation, award a contract, or pay any costs incurred in the preparation of a response. All information submitted in response to this RFI is voluntary.
The Government seeks information from industry regarding commercial or commercially available Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery and inventory management. Additionally, the Government requests feedback to the SOO to help us refine our objectivesAll information regarding this RFI, including the Government’s requirements and requested response information, can be found in the attached documents.
Questions regarding this announcement shall be submitted in writing via e-mail to Contract Specialist Jordan Neal at jordan.neal@hhs.gov and Contracting Officer Julie Rodriguez at julie.rodriguez@hhs.gov by June 1, 2026, at 12:00 PM ET. Verbal questions will NOT be accepted. Questions shall NOT contain proprietary, sensitive, or classified information. The Government does not guarantee that questions received after this date and time will be answered.
Interested parties are requested to respond with a capability statement or white paper. Responses are due no later than June 5, 2026, at 12:00 PM ET and shall be submitted via e-mail to Jordan Neal at jordan.neal@hhs.gov and Julie Rodriguez at julie.rodriguez@hhs.gov. Late responses will not be accepted.
All responses shall include the solicitation number and company name in the subject line of the e-mail submission. Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. All submissions become Government property and will not be returned.
Update #1 ·
This Request for Information (RFI) is issued by the U.S. Department of Health and Human Services (HHS), Office of the Chief Information Officer (OCIO), Office of Information Security (OIS), for planning and market research purposes only. This RFI is NOT a Request for Proposal (RFP), Request for Quote (RFQ), or an Invitation for Bid (IFB), and does not commit the Government to issue a solicitation, award a contract, or pay any costs incurred in the preparation of a response. All information submitted in response to this RFI is voluntary.
The Government seeks information from industry regarding commercial or commercially available Automated Cryptographic Discovery and Inventory (ACDI) solutions to support enterprise cryptographic discovery, inventory management, and post-quantum cryptography (PQC) transition planning activities across HHS environments. All information regarding this RFI, including the Government’s requirements and requested response information, can be found in the attached documents.
Questions regarding this announcement shall be submitted in writing via e-mail to Contract Specialist Jordan Neal at jordan.neal@hhs.gov and Contracting Officer Julie Rodriguez at julie.rodriguez@hhs.gov by June 1, 2026, at 12:00 PM ET. Verbal questions will NOT be accepted. Questions shall NOT contain proprietary, sensitive, or classified information. The Government does not guarantee that questions received after this date and time will be answered.
Interested parties are requested to respond with a capability statement or white paper. Responses are due no later than June 5, 2026, at 12:00 PM ET and shall be submitted via e-mail to Jordan Neal at jordan.neal@hhs.gov and Julie Rodriguez at julie.rodriguez@hhs.gov. Late responses will not be accepted.
All responses shall include the solicitation number and company name in the subject line of the e-mail submission. Proprietary information, if any, should be minimized and MUST BE CLEARLY MARKED. All submissions become Government property and will not be returned.
Files
| File | Type | Posted |
|---|---|---|
| RFI Response_v1.pdf | ||
| Statement of Objectives.pdf | ||
| Strategy-for-Migrating-to-Automated-PQC-Discovery-and-Inventory-Tools.pdf |
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| Bureau of Engraving and Printing (BEP) Request for Information (RFI) - R&D Hidden Machine-Readable Security Features - FY26 | Bureau of Engraving and Printing | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity