Fuzz Testing Solution (with automated Fuzzer) for SAP Applications

The Florida Department of Revenue (FDOR) has issued a Request for Information (RFI) seeking information on a Fuzz Testing Solution (with automated Fuzzer) for their SAP applications. The goal of this RFI is to identify a software testing tool that can detect vulnerabilities and security flaws in the department's SAP GUI, S/4HANA, Fiori, and Java-based enterprise applications prior to deployment. The RFI requires the solution to be compatible with SAP versions 7.5, ECC 6.0 EHP 8, and future releases, as well as the ability to integrate with cloud-hosted SAP instances. Vendors are asked to provide details on the types of vulnerabilities the fuzzing tool can detect, the automated techniques employed, and the reporting and analysis capabilities. The RFI also requests information on licensing models, pricing, support, and customer references. Vendor questions are due by noon on September 29, 2023, and vendor responses to the RFI are due by noon on October 6, 2023.

The RFI is part of a broader state and local contract opportunity issued by the FDOR, which covers jurisdictions in Leon County and Tampa City. The department is interested in obtaining a comprehensive fuzz testing solution for their SAP applications, but there is currently no budget allocated for this project. Vendors are encouraged to provide information on their qualifications, including any set-aside program eligibility, incumbent information, and details on the current technical environment. Funding sources and requirements should also be addressed in the vendor responses.