RFI for Digital Forensics Software Tool

The Social Security Administration’s Office of Acquisition and Grants has issued a Request for Information (RFI) under solicitation number 28321326RI0000030 to gather market information on enterprise-grade digital forensics tools capable of collecting, analyzing, and preserving electronic evidence from computers, mobile devices, and networks. This RFI is explicitly for informational and planning purposes only and does not constitute a solicitation, solicitation for proposals, or any binding obligation by the Government to award a contract. Responses are due by June 18, 2026, and must be submitted electronically via email to Contracting Officer Lindsay Diapoulis at [email hidden], with the solicitation number clearly referenced in the subject line. No telephone, mail, or fax submissions will be accepted, and general marketing materials or website references will not be considered responsive. The SSA’s Division of Security Operations requires a solution that supports both full digital forensics workflows—including complete disk imaging, deep artifact analysis, memory analysis, volume shadow copy extraction, and support for Windows, Linux, macOS, iOS, and Android devices—and targeted eDiscovery workflows focused on user-file collection and direct export without deep analysis. The tool must be installable fully on-premises, ingest and analyze common forensic image formats such as E01 and AD1, support forensic analysis of NTFS, APFS, EXT, and FAT file systems, and provide password cracking capabilities for encrypted files. Legal defensibility, chain-of-custody integrity, and compliance with federal requirements are mandatory. Vendors must also provide a completed Corporate Information Template detailing business size and socioeconomic status—including whether they are a small business, 8(a), SDVOSB, WOSB, or HUBZone—as well as a completed Voluntary Product Accessibility Template (VPAT), software license and support agreements tailored for federal customers, a published pricing list, and detailed service level agreements covering response times for critical incidents, including a P1 response within 30 minutes for platform outages affecting evidence processing. No contract value or estimated funding is available as this is not a procurement action, and the Government will not reimburse any costs incurred in preparing responses.