FA830726RB019 - SBOM VULNERABILITY SCANNING RFI

This Request for Information (RFI) is issued in accordance with the Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes - Oct 1997) and is published to obtain information for use by the Air Force Lifecycle Management Center (AFLCMC), Cryptologic and Cyber Systems Division (CCSD), Joint Base San Antonio - Lackland, Texas, for market research and planning purposes only.

THIS RFI IS NOT A REQUEST FOR PROPOSAL, INVITATION FOR BID, OR AN ANNOUNCEMENT OF A SOLICITATION; IT IS ONLY INTENDED FOR INFORMATION OR PLANNING PURPOSES. There is no bid package or solicitation document associated with this announcement. Response to this RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer if a solicitation is released. Any requests for a solicitation package will be disregarded. The government does not intend to award a contract on the basis of this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the government will arise as a result of preparing submissions in response to this RFI and the government's use of such information. Submittals will not be returned to the sender. Respondents to this RFI may be asked to provide additional information/details based on their initial submittals.

GENERAL SCOPE

The government is seeking sources who can provide software licenses with capabilities that meet the requirements of the attached “Draft” Statement of Work (SOW) for Software Bill of Materials (SBOM) Generation & Vulnerability Analysis Solution. All feedback and information received may be used to determine the appropriate acquisition strategy.

PERFORMANCE REQUIREMENTS

The contractor shall:

               Provide a base one-year software license plus four (4) One-Year Option Periods.

PRODUCT

The proposed product must be a commercial license that meets the requirements of the Draft Statement of Work attached herein.

DELIVERY

Period of Performance:

               Base:               1 Aug 2026 -31 July 2027
               Option Year 1: 1 Aug 2027 -31 July 2028
               Option Year 2: 1 Aug 2028 -31 July 2029
               Option Year 3: 1 Aug 2029 -31 July 2030
               Option Year 4: 1 Aug 2030 -31 July 2031

The government requests White Paper responses:

• Company information to include UEI, CAGE Code, Contract Vehicles, POC
• Potential software solution(s) that could meet the government requirements
  • Brief Narrative of how software solutions meets the requirements.
• Limit responses to 2 pages, 1-inch margins, 12-point Times New Roman font.
• Submit responses to aflcmc.hncx.p1licensemanagement@us.af.mil      &      aflcmc.hnckp.platformonectr@us.af.mil  by February 20, 2026.