Administrative Office of the US Courts

Buyer is seeking qualified vendors to conduct an independent assessment of a proposed large-scale software application design to be implemented in the cloud. The evaluation will focus on security, scalability, cost-effectiveness, and recommendations to accelerate application delivery. Buyer requires a comprehensive review of serverless architecture, containerization, database management, security controls, and DevSecOps practices. This is a Request for Information to identify potential vendors with relevant capabilities and experience.

• 3/25/2025 - Original Published Date
• 4/8/2025 - Proposal Due Date
• 4/23/2025 - Original Inactive Date

• Expertise in application and security assessments for sensitive data
• Experience with security standards and frameworks
• Cloud-native development expertise including serverless architectures
• Extensive cybersecurity experience in cloud-based applications
• Government or high-security assessment experience preferred
• Ability to provide independent, objective evaluation

• Evaluate serverless architecture components for security and cost-effectiveness
• Assess containerization and microservices architecture for scalability and resilience
• Review legacy data migration strategy and cloud database security
• Conduct comprehensive security review across all application components
• Evaluate inter-component communication and API security
• Assess monitoring and logging systems integration
• Review DevSecOps and CI/CD pipeline security configurations
• Analyze application's scalability to accommodate future demands
• Identify advanced cybersecurity threats unique to cloud-native environments
• Evaluate development team capabilities and recommend skill gap solutions