FA8307_RFI_Palo_Alto_Twistlock_Alternatives

Background
The solicitation is issued by the United States Air Force, which is seeking alternatives to the current software solution, Palo Alto's Twistlock, also known as Prisma Cloud Compute Edition.

The goal of this request for information (RFI) is to explore potential solutions that can enforce compliance, provide security across cloud infrastructures, and integrate with existing development tools while maintaining security standards.

Work Details
The current software in use is Palo Alto's Twistlock (Prisma Cloud Compute Edition), which serves multiple functions including:
- Enforcing Comply2Connect by running system checks for secure connections.
- Delivering protection against threats across cloud infrastructure, APIs, and data at runtime while securing applications across Virtual Machines, containers, Kubernetes, and serverless architectures.
- Authenticating users and devices for network resource entitlements.
- Acting as the default runtime security and Dynamic Application Security Testing (DAST) scanning tool for Continuous Authorization to Operate (cATO).
- Integrating with developer tools to identify cloud misconfigurations and vulnerabilities during code and build stages.
- Checking container registries and continuous delivery workflows to block vulnerabilities and prevent insecure deployments.
- Supporting customers in building a software development environment that enhances Zero Trust maturity.
- Integrating with CI/CD pipelines for real-time vulnerability management compliance based on CVEs and CMMC lists.
- Reporting compliance with CVE, NIST, and STIG requirements critical for maintaining security standards.