Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Software Cybersecurity & STIG Compliance Services

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract, titled Software Cybersecurity and STIG Compliance Services, is a total small business set-aside under NAICS 541519 for the Department of Defense, specifically supporting the FA2330 Arspc Mgnt Systms Aflcmc/hba. The contractor is responsible for providing cybersecurity auditing and compliance services for prime contractors on U.S. Air Force software projects. Key deliverables include the generation of Software Bill of Materials, the execution of SAST and DAST scanning, and the verification of DISA Application Security Technical Implementation Guides compliance. The technical scope requires the use of FIPS 140-2/3 validated cryptographic modules aligned with the Risk Management Framework to ensure secure operations. The final output consists of a comprehensive Cybersecurity Package containing the SBOM and completed STIG checklists. The opportunity was posted on September 2, 2026, with a response deadline of October 2, 2027.

General Info

DoD subcontract for software cybersecurity auditing, STIG compliance, and SBOM generation services.

NAICS

541519 - Other Computer Related Services

Place of Performance

MA

Set-Aside

SBA

Documents

This scope was carved out of FA2330A1.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Meteorological and Weather Forecasting Software

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hba
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Performs cybersecurity auditing and compliance for prime contractors on U.S. Air Force software projects. Generates Software Bill of Materials (SBOM), performs SAST and DAST scanning, and verifies DISA Application Security Technical Implementation Guides (STIGs) compliance. Utilizes FIPS 140-2/3 validated cryptographic modules aligned with the Risk Management Framework (RMF). Delivers a Cybersecurity Package including SBOM and STIG checklists.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
Federal
Cyber Security Engineering and Risk Management Framework Support
Solicitation # W91CRB-26-B-A006
Solicitation W91CRB-26-B-A006 is a small business set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services at the Aberdeen Test Center in Maryland. The contract is a Firm-Fixed-Price arrangement with a total period of performance from November 23, 2026, to November 22, 2031, consisting of one base year and four option years. The selected contractor will provide all personnel, equipment, and non-personal services necessary to perform RMF analysis, planning, and maintenance to establish and maintain Authority to Operate (ATO) compliance for Secret and Top Secret systems, adhering to DoD RMF and Intelligence Community Directive (ICD) 503 standards. Award will be made to the lowest-priced, responsive, and responsible bidder based on a Total Evaluated Price that includes a base year and four option years for an IT Sys Solutions Architect-Sr, an IT Certified Professional-Sr, and two surge positions. Bidders must provide proof of an active Secret Facility Security Clearance and certify that personnel meet specific DoD 8570.01-M/DoDD 8140.01 requirements, including CISSP certification for the Senior Architect. Key deliverables include monthly funding balance sheets and adherence to a Quality Assurance Surveillance Plan. The procurement includes a 10 percent price evaluation preference for HUBZone small business concerns.
W6QK Acc-Apg

POSTED

about 2 hours ago

DEADLINE

in 2 days
View Details

More opportunities from Department Of Defense → FA2330 Arspc Mgnt Systms Aflcmc/hba

Same awarding agency

NAICS: 334511
Federal
Sources Sought/RFI - AFLCMC/ESAN FMS Brazil Radar Modernization
Solicitation # A068794
The Aerospace Management Foreign Military Sales Branch is conducting a combined Sources Sought and Request for Information to identify production-ready, highly mobile commercial solutions for the modernization of Ground Control Approach and Precision Approach Radar systems for the Brazilian Air Force and other potential partner nations. The primary goal is to replace existing L3Harris GCA-2000 and PAR-2000 systems to enhance radar surveillance and precision landing operations. A future contract may require the prime contractor to provide all radar equipment, initial spares, site modifications, and system integration. Desired capabilities include full flight inspection certification to FAA/ICAO standards and high transportability, specifically the ability to be transported by KC-390 aircraft with a setup time between four and eight hours. Technical requirements specify threshold and objective goals for Primary and Secondary Surveillance Radar range and altitude, as well as Precision Approach Radar accuracy, resolution, and target capacity. Systems must support ASTERIX Eurocontrol data formats, provide at least two ATC positions with UHF/VHF capabilities, and maintain a Mean Time Between Critical Failure of over 2,000 hours. Interested respondents must submit their capabilities, past performance, and cost estimates by October 8, 2026. Submissions must include a completed Vendor Response Table and a cover letter with company details, not exceeding 20 single-spaced pages in an unclassified PDF format. This notice is for market research purposes only and does not constitute a formal request for proposal or a commitment by the government to award a contract.
Search, Detection, Navigation, Guidance, Aeronautical, and Nautical System and Instrument Manufacturing

POSTED

7 days ago

DEADLINE

in 2 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS