DA10--Static Code Analyzer Maintenance and Support (VA-26-00011436)

The Department of Veterans Affairs Technology Acquisition Center awarded contract NNG15SD21B 36C10B26F0039 to FedStore Corporation on December 8, 2025, for the maintenance and support of 4,080 perpetual licenses of OpenText Fortify Static Code Analyzer (SCA) software. This firm-fixed-price award, valued at $1,872,023.24 for the base period, was set aside for Service-Disabled Veteran-Owned Small Businesses (SDVOSB) and procured via the NASA SEWP V Government-Wide Acquisition Contract. The contract includes a 12-month base period from December 10, 2025, to December 9, 2026, with two additional 12-month option periods available at the government's discretion. The scope of work focuses on sustaining the VA Software Assurance Group's operations by providing quarterly software version and rule pack updates, secure connectivity for diagnostics, and a dedicated technical point of contact. This proprietary software is critical for identifying over 1,600 security vulnerabilities across 33 programming languages, which is essential for the VA to maintain its Authorizations to Operate (ATO) and mitigate cybersecurity risks. Due to the proprietary nature of the software and the excessive costs associated with migrating to an alternative solution, the procurement was conducted as a non-competitive, brand-name acquisition under FAR 16.505.