C000989 - Spring Framework Vulnerability Support RFI
Closed State & local contract opportunity Posted
- Solicitation number
- 2136046
- State
- New York
- Responses due
Opportunity facts
- Points of contact
-
- Heather Chrysler heather.chrysler@its.ny.gov (518) 486-6826
- Laura Crammond its.sm.mat.solicitations@its.ny.gov (518) 000-0000
- Roselyn Disonell roselyn.disonell@its.ny.gov
Updated .
About this opportunity
The New York State Office of Information Technology Services is issuing Request for Information C000989 to solicit vendor capabilities regarding comprehensive, enterprise-grade extended support for the Spring Framework, with RFI responses due July 22, 2026.
The RFI focuses specifically on Spring Boot version 2.7.x and related dependent projects. NYS ITS seeks vendor input on proactive vulnerability management, timely security patching, access to vetted artifacts, expert technical support, extended lifecycle management, centralized support portal features, and documentation and transition support to maintain secure and well-supported applications across state agencies.
The RFI serves as a data-gathering mechanism only and will not directly result in a contract award. This is an information phase preceding any formal procurement. The State currently utilizes Spring Boot 2.7.x across various state agencies and is evaluating vendor capabilities before issuing a formal solicitation. No pricing terms, set-asides, incumbent vendor information, specific funding amounts, contract term lengths, or award dates are specified in the RFI.
Vendors may submit multiple responses offering alternative possibilities, provided each response is separate and complete. All submissions must be written in English and sent via email to its.sm.MAT.Solicitations@its.ny.gov with the subject line "Response to RFI C000989." The vendor questions deadline closed June 24, 2026, with ITS responses posted by July 8, 2026 (estimated). Responses become the property of the State of New York and are subject to disclosure under New York State's Freedom of Information Law except for portions claiming trade secret protection. NYS ITS attached a Questions and Vendor Responses Form addressing vendor qualifications, support scope, ticket management, patch delivery processes, support hours, response time commitments by severity level, escalation procedures, extended lifecycle management strategies, and prior Spring Framework extended-support experience.
Opportunity text
This request is to solicit detailed information from qualified vendors regarding the provision of comprehensive, enterprise-grade extended support for the Spring Framework, with a specific focus on Spring Boot version 2.7.x and its related dependent projects.The objective of this RFI is to gather insights into vendor capabilities, service offerings, and best practices that enhance the State's ability to maintain secure, robust, and well-supported applications built on the Spring ecosystem.NYS ITS is seeking to understand how vendors can provide critical services such as proactive vulnerability management, timely security patching, access to vetted artifacts, and expert technical support to ensure the long-term stability and security posture of its Spring-based applications.
Files
| File | Type | Posted |
|---|---|---|
| Copy of Attachment 2 - RFI C000989 ITS Response to Vendor Questions.xlsx | XLSX spreadsheet | |
| Copy of Attachment 1 - C000989 RFI Questions & Vendor Responses Form.xlsx | XLSX spreadsheet | |
| RFI - C000989 - Spring Framework Vulnerability Support.pdf |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Similar opportunities
- Ask GovTribe AI about this opportunity