SW-118454 - USA (Maryland) - RFI for Mobile Application Shielding Solution - Deadline September 3,2026

– Vendor needs to provide mobile application shielding solution. – Provide commercial off–the–shelf (COTS) solution capable of providing a comprehensive mobile application shielding (in–app protection) solution to add a layer of runtime and binary protection without requiring a rewrite of the application.– Solution must integrate into our existing build with minimal source changes and must not require re–architecting the application.– Solution must identify and support native Android, (Kotlin/Java), native iOS (Swift/Obj–C), React Native, Flutter, React Native (Android and iOS), using the Hermes JavaScript engine.– Solution must be able to protect a React Native application, including its JavaScript bundle.– Solution must provide threat–model coverage documentation for mobile adversary techniques.– Solution must provide multi–layer obfuscation for Android (Java/Kotlin) and iOS (Swift/Obj–C): identifier renaming, string, data–flow obfuscation, control–flow flattening, reflection hardening, and resource obfuscation.– Solution must support react native and harden the Javascript bundle, obfuscation, string, literal scrambling, control–flow mangling, and obfuscation.– Solution must support Runtime Application Self–Protection (RASP).– Solution must Implement layered root (Android) and jailbreak (iOS) detection, acknowledging by passability but designed as scattered, obfuscated friction.– Solution must provide integrity attestation integration.– Solution must support first–class integration with Google Play Integrity API with hardware–backed signals.– Solution must support Apple App Attest and DeviceCheck for server–validated app assertions.