Supply Chain Threat Intelligence & Remediation Software Platform

This is a Notice of Proposed Contract Action under RFO Part 12 Acquisition of Commercial Products and Commercial Services. This notice is for information only; a solicitation will not be issued. THIS IS NOT A REQUEST FOR QUOTATION. No contract will be awarded on the basis of offers received in response to this notice. The associated North American Industry Classification System (NAICS) code is 513210 (Software Publishers) with a small business size standard of $47,000,000 in average annual revenue.

The Government requires procurement of a Supply Chain Threat Intelligence & Remediation software platform that will be capable of ingesting Software Bills of Materials (SBOMs) and performing deep dependency analysis for any software application type. This software tool will provide the Government with a threat intelligence platform and software supply chain threat remediation capability. The license structure will include a base year and 1 option year.

The Government intends to negotiate a sole-source contract for this requirement with Unison Solutions, Inc. 4235 Tejon St, Denver, CO 80211. Sole distributor of the Warpstone Technologies Supply Chain Threat Intelligence & Remediation software platform. The Warpstone software tool is available from only one responsible source and no other type of supplies or services will satisfy agency requirements.

Warpstone is the only company taking a wholistic look at software supply chain risk management without a container focus. Warpstone’s novel tracking system for vulnerabilities that will enable actionable insights which improve security posture and accelerate Zero Trust capabilities. Warpstone's product will expand capabilities from only being able to assess containers to more types of artifacts. Including software binaries, libraries, software components, and containers.

Additionally, the tool is remediation focused, meaning that instead of making a static risk assessment, it allows the Government to manage risk throughout an entire enterprise. Further, Warpstone is the only known commercial platform offering a non-proprietary access code. This is a notice of proposed contract action and not a request for competitive quotes; however, all responsible sources may submit a capability statement or quote, which shall be considered by the agency.

All inquiries should be sent by email to the POCs listed in this notice. Responses must be submitted by the date/time listed on the notice. Any response to this notice must show clear and convincing evidence that competition would be advantageous to the Government in future procurements. Responses received will be evaluated. However, a determination by the Government not to compete the proposed procurement based upon responses to this notice is solely within the discretion of the Government. The Government anticipates an award date on or before 31 August 2026.