Cast Highlight Software and Training

THIS IS A SOURCES SOUGHT NOTICE ONLY. This request is for planning purposes only. It is not a request for offers, quotes, or proposals. This notice does not represent a commitment by the Government to issue a solicitation or award a contract. The Government will not be responsible for any cost incurred by interested parties responding to this notice. This notice is for market research only in accordance with the Federal Acquisition Regulation (FAR) Part 10 to determine the capability of potential sources. General Services Administration (GSA) anticipates an award under North American Industrial Classification System (NAICS) Code 511210, Software Publishers. GSA is issuing this notice in order to solicit capability statements for qualified sources to ensure sufficient competition exists to meet the Government’s requirements. It is the Government’s intent to use information gathered in response to this notice to assist in market research to determine whether to, in accordance with applicable laws, set aside this requirement or solicit offers from all responsible sources. The estimated time of delivery is 30 days after receipt of order (ARO). The purpose of this sources sought is to determine if there exists an adequate number of interested and qualified vendors capable of providing the following product: Cast Highlight Software and Training. The required part numbers and descriptions are listed below: P/N HL-FED-SML – CAST Highlight Federal Edition - 25 applications; 1 year license term; federal on-premises license; unlimited portfolio managers, contributors, and viewers; success plus CAST Highlight provides an objective health assessment of large, decentralized, and complex portfolios of applications leveraging an analysis engine designed for rapid analysis at scale. CASE Highlight uses innovative code pattern analysis to provide visibility at the Portfolio level via portals and reports, and a granular application level via a user-friendly application ID card. CAST Highlight tracks the following health factors: Software resiliency – which deals with the robustness to identify and mitigate risk Software agility – which defines overall maintainability and transferability that have major impacts on cost Software elegance – which calculates complexity and therefore the changeability of the applications – a key predictor or effort. CAST Highlight computes, manages, and/or calculates: CloudReady Index Portfolio-level ranking of eligibility of applications to migration to Cloud – PaaS Identifies specific Boosters and Blockers for each application Software Composition Analysis (SCA) – which identifies the use of 3rd party and open-source components in the target application(s) Reports include Vulnerability analysis (CVEs) and open license tracking (e.g., MIT, GNU, etc. public licenses) where verifiable Detect Data Privacy/Sensitive Data Use Detection To support commercial compliance laws like GDPR and PII which mandate privacy. Highlight complements traditional data-based analysis approach by detecting applications that may use sensitive data Integrated Survey Management Pre-defined and customizable survey to capture business and descriptive data about target applications Survey data automatically correlated with health factors and indexes to improve context and prioritize actions across target portfolio CloudReady Option Portfolio-level ranking of eligibility of applications to migration to Cloud – PaaS Identifies specific Boosters and Blockers for each application Software Composition Analysis (SCA) Option Identifies the use of 3rd party and open-source components in the target application(s). Reports include Vulnerability analysis (CVEs) and open license tracking (e.g., MIT, GNU, etc. public licenses) where verifiable CAST Highlight agent is required to analyze source code. Agent contains all the code quality analyzers and other utilities needed to analyze targeted source code. Agent creates an encrypted fie that client uploads to CAST Highlight portal. File only contains application name and data needed to finalize the scanning. No source code or other information is uploaded to the CAST Highlight portal. Agent is a locally deployed static standalone application that does not actively access networks or monitor systems. Other: Duration: 12-month term license Scope: Up to 25 applications Training and implementation services are required to support basic training and upgrades for the Federal On-premises version of the software will be delivered remotely. 2. P/N CAST T&I – Training classes for installation and implementation of software, per day, plus travel expenses; 10 student maximum per session (5 days) Information received from this source sought will be used to determine potential market capability and the acquisition strategy (i.e., Full and Open, small business set-aside, etc.). If your company has the potential capability to satisfy this requirement, please provide the following information: Capability Statement – Please include the responses to the following questions: Question 1: Are you able to ship to CONUS and OCONUS? Orders typically are stateside, with OCONUS orders going to government CCP (Tracy, New Cumberland, or Atlanta). Question 2: What is the minimum order quantity and/or amount? Question 3: Please state if you are a certified small business (8(a), WOSB, HubZone, or SDVOSB). Written responses to this sources sought should be directed via email to Ms. Emily Walker at [email protected] no later than 4:00PM EDT on Friday, 23 June 2023. The subject line should read “Responses to Sources Sought 47QSEA23Q0222”.