This Solicitation opportunity from Social Security Administration was posted on May 5, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.
Request for Information (RFI) -- DAST Tool
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
Active Opportunities Like This One
AI Contract Overview
The Social Security Administration's Office of Acquisition and Grants is seeking information for procuring a Dynamic Application Security Testing (DAST) tool to enhance the security testing of its applications. Currently, the Web Application Security Team (WAST) uses static application security testing (SAST) with Checkmarx and software composition analysis (SCA) with Black Duck to analyze SSA applications’ code during development. The addition of a DAST solution, which performs black box testing by scanning applications during execution, is intended to detect vulnerabilities that static tools cannot identify. This effort aims to improve compliance with FISMA metrics, meet external audit requirements, and bolster cybersecurity by identifying exploits earlier in the development cycle before production deployment. The contract is identified by solicitation number 28321326RI0000019 and was posted on May 5, 2026, with proposals due by May 19, 2026. The procurement falls under the NAICS code 513210 and is managed by the SSA Office of Acquisition and Grants in Baltimore, Maryland. This initiative supports federal mandates and new penetration testing requirements for all Tier 1 applications and systems undergoing the Authority to Operate process. Keelin McGrath is the primary point of contact for this solicitation, reflecting the urgency to secure funding and implement DAST capabilities to strengthen the agency’s application security posture.
General Info
Agency
NAICS
Place of Performance
MDSet-Aside
Documents
(0)AI Contract Breakdown
Uniform Contract FormatNo contract breakdown available.
Cannot generate Contract Breakdown because no documents were found from this contract's source.
Timeline
Submission Closed
Organization & Contact Information
Full Description
The Web Application Security Team (WAST) performs static code scanning of all SSA applications as part of the Office of Information Security’s (OIS) cybersecurity program. This is accomplished with the static application security testing (SAST) tool called Checkmarx and the software composition analysis (SCA) tool called Black Duck. Both of these solutions are white box testing tools that analyze the application’s code as it's being built. WAST is looking to procure a Dynamic Application Security Testing (DAST) solution to better analyze SSA applications, to bolster FISMA metrics, and to satisfy the requirements from multiple external audits and assessments. The DAST tool would scan applications as they are executed to identify exploits that can only be detected from black box testing. This funding is required immediately to better support the workload of multiple federal mandates and to provide black box testing early in the development lifecycle to stop exploits before they go to Production and potentially cause a security breach. This will also support a new requirement to perform penetration testing on all Tier 1 applications and all information systems going through the Authority to Operate (ATO) process.
