FA830726RB019 - SBOM Vulnerability Scanning RFI

The Air Force Lifecycle Management Center’s Cryptologic and Cyber Systems Division has issued a Request for Information (RFI) to gather market intelligence and support acquisition planning related to a Software Bill of Materials (SBOM) Generation and Vulnerability Analysis solution. This RFI is not a solicitation or bid invitation but aims to identify potential commercial software license providers that can meet the requirements outlined in a Draft Statement of Work. Interested parties are invited to submit white papers detailing their company information, including UEI and CAGE codes, contract vehicles, points of contact, and a brief narrative explaining how their software solutions address the government’s needs. Responses are limited to two pages and must be submitted by February 20, 2026. The anticipated contract would involve the provision of a base one-year software license with four additional one-year option periods, covering a performance period from August 1, 2026, through July 31, 2031. The product offered must be commercially available and compliant with the specifications set forth in the draft SOW for vulnerability scanning and SBOM generation. The government emphasizes that no contract award or payment will result from this RFI and that submissions will not be returned. The responses will inform the government’s acquisition strategy for this cybersecurity capability, with points of contact available within the Platform One License Management Team and the Contracting Officer at the Air Force office in San Antonio, Texas.