# Request for Information (RFI) -- DAST Tool

Canonical: https://abierto.us/opportunities/28321326ri0000019

- Solicitation number: 28321326RI0000019
- Notice type: Solicitation
- Status: Closed. Deadline was May 19, 2026 at 2:00 PM EDT
- Department: Social Security Administration
- Contracting office: SSA Ofc of Acquisition Grants (283213)
- NAICS: 513210 Software Publishers
- Product or service code: 7A21 Business Application off-the-shelf software delivered by perpetual license, which also encompasses enterprise level software enabling mission capability and business operational support.
- First posted: May 5, 2026
- Last posted: May 5, 2026
- SAM.gov: https://sam.gov/workspace/contract/opp/3eb2e19333c74290a09fb24d29c3a8b3/view

## Description

The Web Application Security Team (WAST) performs static code scanning of all SSA applications as part of the Office of Information Security’s (OIS) cybersecurity program. This is accomplished with the static application security testing (SAST) tool called Checkmarx and the software composition analysis (SCA) tool called Black Duck. Both of these solutions are white box testing tools that analyze the application’s code as it's being built.

WAST is looking to procure a Dynamic Application Security Testing (DAST) solution to better analyze SSA applications, to bolster FISMA metrics, and to satisfy the requirements from multiple external audits and assessments. The DAST tool would scan applications as they are executed to identify exploits that can only be detected from black box testing.

This funding is required immediately to better support the workload of multiple federal mandates and to provide black box testing early in the development lifecycle to stop exploits before they go to Production and potentially cause a security breach. This will also support a new requirement to perform penetration testing on all Tier 1 applications and all information systems going through the Authority to Operate (ATO) process.

## Publications

- May 5, 2026: Solicitation, due May 19, 2026 at 2:00 PM EDT. Notice 3eb2e19333c74290a09fb24d29c3a8b3. https://sam.gov/workspace/contract/opp/3eb2e19333c74290a09fb24d29c3a8b3/view

## Points of contact

- Keelin McGrath, keelin.mcgrath@ssa.gov

---
Source: SAM.gov Contract Opportunities bulk extract. Confirm deadlines on SAM.gov before responding. Cite https://abierto.us/opportunities/28321326ri0000019.