SAST Tool Agmntn (COBOL) - S/W - To acquire brand name Veracode SAST Software as a Service (SaaS) an...

The Internal Revenue Service is forecasting the acquisition of Veracode Static Application Security Testing (SAST) Software as a Service to address a critical gap in its ability to scan COBOL-based code for security vulnerabilities. This annual subscription includes ongoing support and is intended to strengthen the agency’s Security Risk Management, Penetration Testing, and Code Analysis capabilities specifically for legacy COBOL systems, which are currently unsupported by existing tools. The procurement is being managed under the Chief Information Officer’s office with point of contact information provided for both the Bureau and Program Office to ensure alignment and coordination. The action is classified under NAICS code 541519 for other computer-related services and is posted as a forecast with a date of May 25, 2026, indicating it is a planned future procurement rather than an active solicitation. No set-aside designation is specified, and the place of performance and office address details are not provided, suggesting the service delivery will be remote through the Veracode SaaS platform. All communications and inquiries should be directed to Trunita Plummer and Peter Lockwood as the designated contacts.