The Web Application Security Testing is requesting funding to procure Sonatype Repository Firewall, a security module that integrates directly with our existing Nexus Repository Manager in the Modern Development Environment (MDE).

The Social Security Administration’s DERC is seeking funding to acquire Sonatype Repository Firewall, a security solution designed to integrate seamlessly with its existing Nexus Repository Manager within the Modern Development Environment. This procurement aims to enhance the security posture of software supply chains by detecting and blocking malicious or vulnerable components before they enter the development pipeline, thereby reducing exposure to open-source risks and compliance violations. The solution will provide automated policy enforcement, real-time threat intelligence, and vulnerability scanning tailored to the organization’s development workflows. The request is categorized as a forecast under the Social Security Administration’s procurement planning, with no solicitation number or set-aside designation currently assigned. While the contract does not specify a timeline, delivery location, or point of contact, it reflects a strategic initiative to strengthen cybersecurity controls across the agency’s software development lifecycle. Implementation will be confined to the Modern Development Environment, ensuring alignment with existing infrastructure and minimizing disruption to current operations.