Application Security Platform (ASP) Static Application Security Testing Software
Past Recompete Updated
- Agency
-
Citizen and Immigration Services
Department of Homeland Security
- Solicitation expected
- Estimated value
- $1,000,000 to $2,000,000
- Set-aside
- HUBZone
Forecast facts
- Anticipated award
- Through
- Acquisition strategy
- Follow-on to Existing Contract
- NAICS code
- 541519 Other Computer Related Services
- Place of performance
- Camp Springs, MD
- Forecast number
- F2024067233
- Points of contact
Forecast details come from DHS's Acquisition Planning Forecast System. Agencies' dates and values are estimates.
About this forecast
The Department of Homeland Security US Citizen and Immigration Services (USCIS) is seeking to procure a cloud-native unified Application Security Platform (ASP) that can provide Static Application Security Testing capabilities. The platform must be able to be hosted within USCIS's Amazon Virtual Private Cloud and have the ability to automatically visualize the interactions between the different components of USCIS's applications, including custom source code, Infrastructure as Code, APIs, and open-source libraries.
The estimated solicitation release date is August 20, 2024, with an estimated award date of September 28, 2024. The estimated award value range is between $1,000,000 and $2,000,000. The place of performance is Camp Springs, MD, USA.
Forecast text
***Update, 9/18/24: change small business program field ***
USCIS requires a cloud native unified application security platform, Application Security Platform (ASP) Static Application Security Testing which can be hosted within USCIS's Amazon Virtual Private Cloud. USCIS's applications are made up of many different components (e.g., custom source code, Infrastructure as Code, APIs, Open-source libraries). This poses a challenge for USCIS as the attack surface has expanded and become more complex. USCIS needs a solution that will automatically show how the different components of the application interact with each other and where/how they are deployed. Software Composition Analysis USCIS requires a Software Composition Analysis solution that provides real time threat intelligence on malicious packages, in addition to traditional vulnerability assessments of open-source libraries and applications. The threat landscape has evolved and in recent years there has been a rise in adversaries imbedding malicious code into popular open-source libraries as a backdoor into the enterprise. To stay ahead of this threat, a unified application security platform that encompasses SAST and SCA will allow USCIS to quickly visualize how an application operates, and where lateral movement could occur. Without this capability, USCIS will be unable to understand the context of identified vulnerabilities and will struggle to prioritize remediation efforts.
On GovTribe
Work this forecast
- Track it in your pipeline
- Find teaming partners
- Similar forecasts
- Ask GovTribe AI about this forecast