Splunk or Alternatives - Request For Information

The Air Force Life Cycle Management Center (AFLCMC) Cryptologic and Cyber Systems Division is conducting market research via a Sources‑Sought RFI (FA8307‑Splunk26) to identify unified data platforms that can deliver integrated security‑monitoring, compliance, threat‑intelligence, analytics, and incident‑response capabilities for the DoD Unified Platform (UP). Respondents must provide information on products—whether Splunk licenses or alternative solutions—that offer real‑time SIEM, centralized logging from diverse sources, continuous compliance monitoring, advanced threat hunting, and visualization tools, while supporting DoD security requirements such as CAC/ECA single sign‑on, classification banners for CUI/PII, and audit logging of all administrative events. Additional technical expectations include containerized deployment via Helm charts, API integration, Keycloak‑based user/group management, automated scripting and CLI administration, and support for browser APIs and polyfills. Responses are voluntary and will not result in a contract award; however, the Government seeks detailed answers to the questions in Section 4.0, including optional pricing, contract vehicle, CAGE and DUNS numbers. Submissions must be emailed to Contracting Officer Karin Werner (karin.werner.1@us.af.mil) and Program Manager Christopher Olvera (Christopher.Olvera@us.af.mil) no later than 08:00 CST, 30 April 2026, with the subject line “RFI Response: Unified Data Platform and SIEM for Unified Platform.”

Notice ID

3bdf0817358543d3aec5cade9e08c137

Solicitation Number

FA8307Splunk26

NAICS Code

541519

Classification Code

7A20