USAF - Gitlab Premium & Ultimate - MRAS

The United States Air Force (USAF) Development Security Operations (DevSecOps) is seeking to purchase GitLab Premium and Ultimate licenses to support their software development environment. The purpose of this purchase is to enable Platform One (P1) to create and maintain software threat models and secure compliant code while utilizing the flexibility of the cloud. GitLab provides an end-to-end DevSecOps platform, including source code management, continuous integration/continuous development (CI/CD) pipelines, and embedded security features. The period of performance for GitLab Premium is from March 13, 2024, to March 12, 2025, while GitLab Ultimate is from March 31, 2024, to March 30, 2025. The place of performance is Platform One/HNCX in San Antonio, TX.

GitLab is a critical component of P1's software development architecture and is integrated into all accredited P1 pipelines. Replacing or restructuring this architecture would disrupt day-to-day operations and impact multiple Department of Defense (DoD) customers, including the United States Navy (USN), United States Army (USA), and USAF. GitLab is the only software development application that meets P1's zero trust security requirements. The performance objectives of GitLab include streamlining software development through expedited code reviews, advanced CI/CD capabilities for complex pipelines, and dynamic application security testing (DAST) to prevent web application vulnerabilities. GitLab will also support all of P1's customers in building and maintaining a developmental software environment that meets zero trust standards.

This procurement is a license renewal for P1 and includes the acquisition of 1500 GitLab Premium licenses and 300 GitLab Ultimate licenses. All licenses must meet DoD regulatory guidelines. The contractor will have a single point of contact for coordination with the P1 Program/Acquisition Manager and the Procurement Contracting Officer. They will be responsible for providing necessary licenses and license keys, timely issue identification and resolution, and effective communication of license updates and expiration dates. Additionally, the request for information (RFI) requires the inclusion of alternative software options that are of equal or greater value than GitLab.