RegScale Alternative Sources/Solutions

The U.S. Air Force Life Cycle Management Center, through the Platform One Program Office, is conducting market research via a Request for Information to identify commercially available alternatives to RegScale that support Governance, Risk, and Compliance automation within secure government environments. The initiative aims to evaluate solutions capable of automating Continuous Compliance Monitoring, Risk Management Framework activities, continuous Authority to Operate sustainment, control inheritance management, evidence collection, policy mapping, and security documentation across the Platform One DevSecOps ecosystem. Vendors are invited to respond with capabilities that align with federal security standards including NIST 800-53, FedRAMP, CMMC, and STIG, and must demonstrate support for role-based access control, SAML/SSO integration, and connectivity with government platforms such as GitLab, Jira, ServiceNow, and Kubernetes. Responses are due by May 16, 2026, and while no formal contract award is anticipated from this RFI, input will directly inform future acquisition strategy and sourcing decisions. The Government emphasizes maximum competition and is open to solutions from all qualified vendors without socioeconomic set-asides. The procurement seeks a software license and services package to be delivered electronically within five business days of any future award, with performance expected to begin June 17, 2026, under a base year and two optional one-year extensions through June 2029. Deliverables will include license keys transmitted via designated government email addresses, with no physical packaging, marking, or shipping requirements specified. The solution must enable automated compliance tracking, audit readiness, and real-time remediation workflows while operating securely within a DoD-sanctioned environment. While no pricing, evaluation factors, or award criteria are included—consistent with the information-gathering nature of the RFI—special requirements include the designation of a single contractor point of contact for coordination with program and contracting officials, and adherence to compliance frameworks without requiring explicit contractor personnel security clearances. The solicitation number is FA830726RB028, and inquiries should be directed to the Platform One License Management Team or Mr. David Garcia.