C000989 - Spring Framework Vulnerability Support RFI

This request is to solicit detailed information from qualified vendors regarding the provision of comprehensive, enterprise-grade extended support for the Spring Framework, with a specific focus on Spring Boot version 2.7.x and its related dependent projects.The objective of this RFI is to gather insights into vendor capabilities, service offerings, and best practices that enhance the State's ability to maintain secure, robust, and well-supported applications built on the Spring ecosystem.NYS ITS is seeking to understand how vendors can provide critical services such as proactive vulnerability management, timely security patching, access to vetted artifacts, and expert technical support to ensure the long-term stability and security posture of its Spring-based applications.