RegScale Alternative Sources/Solutions

Project ID: RFI_HNC_Regscale_FA830726RB028 FederalOpportunitiesSources Sought

Overview

Agency	AFLCMC Joint Base San Antonio
Deadline	05/16/26
Posted	05/08/26
Estimated Value	$750,000 - $3,000,000 (AI estimate)
Set Aside	None
NAICS	513210 - Software Publishers
PSC	Not Provided
Location	San Antonio, TX United States

Description

Primary Latest Change

The Government is conducting market research to identify and assess commercially available alternatives to RegScale in support of Platform One (P1) mission requirements. This Request for Information (RFI) is issued for market research and acquisition planning purposes to evaluate industry capabilities and available solutions that provide Governance, Risk, and Compliance (GRC) automation, continuous compliance monitoring, security control management, risk assessment tracking, audit readiness, and authorization support within a Government security-compliant environment. The Government seeks to identify solutions capable of supporting enterprise compliance operations, Risk Management Framework (RMF) activities, continuous Authority to Operate (cATO) sustainment, control inheritance management, evidence collection automation, policy mapping, and security documentation management across Platform One's DevSecOps ecosystem. Responses to this RFI will assist the Government in identifying qualified sources, evaluating alternative capabilities, and informing future acquisition strategy decisions. This RFI is for informational purposes only and does not constitute a solicitation, request for proposal, or a commitment by the Government to award a contract. The Government encourages responses from all capable vendors and seeks to promote maximum practicable competition while assessing solutions that meet or exceed the operational, technical, and security requirements necessary to support Platform One mission execution.

Summary (Newest Update)

Background The Air Force Life Cycle Management Center (AFLCMC) Crypto and Cyber Systems Division (CCSD) supports the Platform One (P1) Program Office in developing and sustaining advanced software applications for cyber operations. The P1 mission aims to migrate legacy Department of War (DoW) portfolios into a cloud-native architecture, enhancing technology for warfighters while reducing long-term costs and increasing reliability. To achieve these objectives, the P1 team requires advanced Continuous Integration/Continuous Deployment (CI/CD) pipeline tools to implement Development Security Operations (DevSecOps). This Request for Information (RFI) seeks to identify commercially available alternatives to RegScale that can support Governance, Risk, and Compliance (GRC) automation and continuous compliance monitoring within a government security-compliant environment. Work Details The contract will focus on providing access to RegScale software licenses, which are designed to modernize regulatory compliance management through Continuous Controls Monitoring (CCM) and automated workflows. Key tasks include: - Supporting enterprise compliance operations and Risk Management Framework (RMF) activities. - Ensuring continuous Authority to Operate (cATO) sustainment. - Managing control inheritance and automating evidence collection. - Mapping policies and managing security documentation across the DevSecOps ecosystem of Platform One. - Delivering necessary licenses and license keys within 5 business days after award. The contractor must maintain effective communication regarding license updates, timelines, and expiration dates. Period of Performance Base period from 17 June 2026 to 16 June 2027, with two optional years extending through 16 June 2029. Place of Performance Platform One/HNCX, 420 Broadway St., San Antonio, TX 78205

Contacts

Contact name	Platform One License Management Team
Contact email	aflcmc.hncx.p1licensemanagement@us.af.mil
Contact phone	None
Secondary contact name	Mr. David Garcia
Secondary contact email	david.garcia.129.ctr@us.af.mil
Secondary contact phone	None