Request for Information (RFI) -- DAST Tool

The Social Security Administration (SSA) is seeking information on Dynamic Application Security Testing (DAST) tools to enhance the security of their applications. The SSA currently uses static application security testing (SAST) and software composition analysis (SCA) tools, but wants to add a DAST solution to identify exploits that can only be detected through black box testing. The goal is to improve the security of SSA applications, satisfy external audit requirements, and support penetration testing on Tier 1 applications. • The DAST tool should be able to scan applications as they are executed to identify exploits. • The tool should support black box testing early in the development lifecycle to prevent security breaches. • The SSA is looking to procure a DAST solution to better analyze SSA applications and satisfy FISMA metrics.