SAST Tool Agmntn (COBOL) - S/W - To acquire brand name Veracode SAST Software as a Service (SaaS) an...

The contract entails the acquisition of Veracode Static Application Security Testing (SAST) Software as a Service (SaaS) annual subscriptions and support specifically aimed at enhancing the capability to scan COBOL programming language code. This acquisition addresses a critical gap in the organization’s Security Risk Management (SRM), Penetration Testing, and Code Analysis (PTCA) processes by providing advanced tools to identify vulnerabilities within COBOL applications. The contract is identified by solicitation number 2032H5-22-F-00694 and is managed by the Internal Revenue Service under the Chief Information Officer office. This procurement is categorized under NAICS code 541519 and is listed as a forecast type contract posted on March 2, 2026. The agreement includes support services required for the effective use and maintenance of the Veracode SAST solution for COBOL environments. Points of contact include Trunita Plummer from the bureau and Peter Lockwood from the program office, who oversee the execution and management of this contract. The contract aims to strengthen cybersecurity capabilities by improving code scanning and risk identification for legacy and critical COBOL applications within the IRS infrastructure.