DA10--Alternative to BigFix Endpoint Management (VA-26-00012805)

SOL #: 36C10B26Q0019Sources Sought

Overview

Buyer

Veterans Affairs

Veterans Affairs, Department Of

TECHNOLOGY ACQUISITION CENTER NJ (36C10B)

EATONTOWN, NJ, 07724, United States

Place of Performance

Place of performance not available

NAICS

Other Computer Related Services (541519)

PSC

Support Services, Delivered As A Service Contract (Saa S Or Subscription) Involved With The Analysis, Design, Development, Code, Test And Release Packaging Services Associated With Application Development Projects, As Well As Off The Shelf Business Software. (DA10)

Set Aside

No set aside specified

Original Source

https://sam.gov/opp/3aab73f45e0a46f793aeb18406b41998/view

Timeline

Posted

Sep 25, 2025

Last Updated

Apr 30, 2026

Response Deadline

Oct 6, 2025, 8:00 PM

Qualification Details

Fit reasons

NAICS alignment with historical contract wins in similar service areas.
Scope strongly matches core technical capabilities and delivery model.

Risks

Past performance thresholds may require one additional teaming partner.
Potential clarification needed on staffing minimums before bid/no-bid.

Next steps

Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.

Quick Summary

The Department of Veterans Affairs (VA) intends to issue a Request for Quotation (RFQ) for an Alternative to BigFix Endpoint Management solution. This acquisition, identified as RFQ 36C10B26Q0308, will be conducted as a Service-Disabled Veteran-Owned Small Business (SDVOSB) set-aside on the NASA Solutions for Enterprise-Wide Procurement (SEWP) Government-Wide Acquisition Contract (GWAC). The VA is targeting the posting of the solicitation in the week of May 11, 2026.

Purpose & Scope

This presolicitation notice follows market research conducted via RFI 36C10B26Q0019, which sought information on alternative endpoint management solutions to the currently deployed HCL BigFix software. The VA requires a solution capable of managing approximately 150,000 clients/endpoints across on-premises, AWS, and Azure environments. Key capabilities prioritized include:

Cross-OS Patching: Support for Windows Server, Linux, Solaris, and MacOS.
Real-Time Compliance/Enforcement: Continuous monitoring and enforcement, including CDM for CCE and CVE.
Offline/Air-Gapped Support: Full functionality for disconnected endpoints.
Third-Party Patch Catalog Depth: Extensive library for application patches.
Role-Based Control / Least Privilege: Granular access controls.
Compliance Reporting: Detailed reports based on STIG, CIS, and USGCB standards.
Integration: Seamless integration with CMDB, SIEM, SOAR, Azure, AWS, and ServiceNow via API.
Software Distribution, Asset Discovery/Management, and Vulnerability Correlation.
Automation at Scale: Handling over 500,000 endpoints.
Federal Compliance Posture: Adherence to FISMA and CDM mandates.

Contract Details

Opportunity Type: Presolicitation (leading to RFQ 36C10B26Q0308)
Vehicle: NASA SEWP GWAC
Set-Aside: Service-Disabled Veteran-Owned Small Business (SDVOSB)
Department/Office: Department of Veterans Affairs, Technology Acquisition Center NJ (36C10B)
Target Solicitation Posting: Week of May 11, 2026
Response Date (for this presolicitation): May 6, 2026, 10:00 AM Eastern Time

Eligibility

Market research confirmed the availability of multiple SDVOSB prospective resellers capable of providing the required information technology products under NASA SEWP, leading to the SDVOSB set-aside decision.