DJ01--Zero Trust Application Realtime Protection (ZARP) (VA-25-00093376)

This notice amends the RFI (VA-25-00093376) for Zero Trust Application Runtime Protection (ZARP), originally issued July 8, 2025, to inform industry of the outcome. The solicitation was subsequently released via NASA SEWP (36C10B25Q0516) as an SDVOSB set-aside on August 21, 2025. No response is required; this is for informational purposes only. The ZARP initiative seeks a turnkey, commercial off-the-shelf (COTS) solution (e.g., Palo Alto Networks Prisma Cloud Enterprise Edition or equivalent) providing end-to-end runtime protection for web applications, APIs, and critical backend services across hybrid environments. The solution must support cloud-native, web-facing, and non-web workloads; be FedRAMP authorized (Moderate or High); integrate with Splunk; and achieve a true-positive detection rate of at least 98% and a cross-over error rate of no more than 2%. Specific details regarding application inventory, IAM systems, CI/CD pipelines, and other sensitive information will be provided to the selected vendor post-award.

Notice ID

18f1eed350274df5b7b52038e4f19ba8

Solicitation Number

36C10B25Q0429

NAICS Code

541519

Classification Code

DJ01