DigiCert or Alternatives - Request for Information

Solicitation / RFP / RFQ

This document is a Request for Information (RFI) from the Air Force Life Cycle Management Center (AFLCMC) for software solutions to support Platform One (P1) in creating and maintaining software threat models and secure, compliant code. The goal is to enable the United States Air Force (USAF) Development Security Operations (DevSecOps) within a cloud environment. The solution must provide end-to-end security through Public Key Infrastructure (PKI) and digital certificates for the P1 software environment. This announcement constitutes a formal solicitation for commercial products and/or services in accordance with FAR Part 12, with potential application of FAR Part 13, 14, or 15 procedures. The government intends to award a contract to the best value offeror and may award without discussions.

• Software capable of creating and maintaining software threat models and secure, compliant code.

• End-to-end security via PKI and digital certificates for the P1 environment.

• Support for secure communication via SSL certificates meeting DoD PKI Interoperability program standards.

• Features for continuous authorization to operate (cATO), compliance with virtualization, public cloud, and container environments.

• Automation with real-time compliance and security features, policy, visibility, and administrative guardrails.

• Built-in compliance templates for hardening virtual machine and containerized environments.

• The government anticipates a contract with a base year and up to four one-year options. Offerors should specify their willingness to agree to this contract structure.

• Offerors are invited to submit proposals in response to the requirements.

• Proposals must be prepared in accordance with the instructions, terms, and conditions provided.

• The government reserves the right to award without discussions.

• Offerors are responsible for monitoring the solicitation for amendments.

• This RFI is specifically interested in alternative software solutions. Responses should focus on alternative software data/answers, not software already in use.

• This document is a Request for Information (RFI) and may result in a contract award.

• All three sheets in the document (T&C and Contact Information, RFI Q&A, Requirements Capability Sheet) are to be completed by offerors.

• The government will not pay for proposal preparation costs.

• Offerors must ensure proposed products and services meet the definition of "commercial" per FAR 2.101.