SD Elements or Alternatives - Request for Information

The Air Force Lifecycle Management Center (AFLCMC) is seeking information on alternative software to SD Elements. The software should provide threat modeling for software applications, surveys for customizing threat modeling, and a system of countermeasures to enforce standards across application teams. The software should also integrate with SSO protocols, identify and model potential threats throughout the software development lifecycle, and provide visual representation of attack vectors and security risks. • Must provide the ability to do threat modeling for software applications • Must have ability to provide surveys that allow security personnel to customize threat modeling per application • Must provide a system of countermeasures that help security personnel enforce standards across application teams • Countermeasures must map to NIST 800-53 and NIST 800-171 controls • Must provide some level of automated countermeasure responses/resolutions via integrations with SAST and code quality scanners • Must be able to run on a kubernetes host via helm chart deployment • Must have ability to separate each application into projects, of which each can be scoped to specific users relying on RBAC • Must integrate with SSO protocols such as OIDC/SAML • Must be able to Identify and model potential threats throughout the software development lifecycle (SDLC) • Must Provide visual representation of attack vectors and security risks (e.g., data flows, trust boundaries) • Must be able to provide dynamic threat analysis as application architecture evolves • Must be able to integrate with DevSecOps lifecycle