SW-116261 - USA (California) - Application Security Testing Platform - Deadline July 29,2026

(1) Vendor needs to provide application security testing platform. – Provide an Application Security Testing (AST) platform capable of supporting secure software development across multiple programming languages and development environments. – The solution must provide integrated capabilities for Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and AI–assisted remediation to identify, prioritize and remediate vulnerabilities throughout the development lifecycle.– The platform should offer seamless integration with modern source–code management systems and CI/CD pipelines, support enterprise authentication (including SSO) and include licensing models appropriate for developer–centric or application–centric usage.• Provide FedRAMP Moderate or GovRAMP authorization certification where applicable.• Deliver fully integrated SAST, DAST, and SCA scanning, including findings triage, severity scoring, developer–friendly reporting, and vulnerability history tracking.• Provide AI–assisted remediation guidance, including automated patch recommendations and code–fix suggestions.• Support CI/CD pipelines, including GitHub, GitLab, Azure DevOps, Bitbucket, and other SCM systems in use across agency development teams.• Provide agency–approved deployment models (cloud, on–premises, or hybrid).• Support Single Sign–On (SSO) and role–based access control.• Provide dashboards suitable for audit, compliance and ongoing operational security reporting.• Support licensing models suitable for both developer–centric and application–centric scenarios Clearly define all usage limits, concurrency constraints and entitlements.• Provide onboarding, administrator training, developer enablement sessions, and on–demand learning resources.(2) All the questions must be submitted no later than July 15, 2026. (3) Mandatory pre–bid meeting will be held on July 8, 2026.