Soteri Secret Scanning for Bitbucket license renew

The Social Security Administration, through the Office of Acquisition and Grants, is soliciting a firm fixed-price purchase order for a 12-month subscription renewal of Soteri Security for Bitbucket Enhanced Secret Scanner (Data Center). This procurement, identified by solicitation number 28321327Q00000017, is intended to support the agency's Application Security and DevSecOps program by providing secret scanning for 3,000 users under part number ATL-MP-SECUR4BDC-3000R. The software is critical for the proactive detection and prevention of hardcoded secrets, such as API keys, passwords, and personally identifiable information, within Bitbucket repositories. Key technical capabilities include real-time commit blocking, historical repository audits, on-instance hosting to prevent data exfiltration, and integration with ServiceNow SecOps and Checkmarx/Black Duck workflows. The period of performance is scheduled from December 30, 2026, to December 29, 2027. Award decisions will be based on technical acceptability and price, with the agency performing a price analysis on the lowest priced quotation. Quoters must maintain active registration in the System for Award Management and provide a completed CSCRA Questionnaire and Additional Information Form. The solicitation incorporates various Federal Acquisition Regulation clauses, including those regarding commercial products and services, whistleblower rights, and supply chain security. Invoices are to be submitted electronically to the Office of Travel and Administrative Payment Services, with payments processed via Electronic Funds Transfer.