GSA - Application Security Testing - Market Research

GSA - Application Security Testing - Market Research The U.S. government is focused on increasing the depth, rigor, and creativity of its approach to application security testing, so that it sees and analyzes its applications as its adversaries do. Federal agencies need to employ sophisticated tools that can statically and dynamically analyze applications for detectable weaknesses. However, to better match our adversaries, agencies will also have to go beyond what can be easily automated and bring to bear deep technical cybersecurity expertise to manually analyze how government applications work and how they can be subverted. In this RFI, GSA is seeking information about the availability of Application Security Testing (AST) capabilities that support this effort, including manual expert analysis as well as automated tools, to discover security flaws in Federal applications and provide actionable results. GSA invites respondents to answer some or all of the questions below. One of the primary goals of this effort is to build an understanding of the complexity and diversity of this marketplace, ensuring federal agencies can make the greatest use of the services, technologies and toolsets available. Not all questions listed below are appropriate for all solutions, and niche services may add significant value considering the unique nature of many federal systems. Responses Due: 09/30/2022