DA10--DB Protect Software and Maintenance Bridge (VA-26-00089068)(New Work)

This requirement was for a firm-fixed price delivery order (DO) issued under National Aeronautics and Space Administration (NASA) Solution for Enterprise-Wide Procurement (SEWP) V Government wide Acquisition Contract (GWAC) contract NNG15SD20B with Cynergy Professional Systems LLC (Cynergy) to provide brand name TrustWave Holdings Inc. (TrustWave) DbProtect term software licenses with maintenance and technical support. Cynergy is a Small Business Administration Certified Service-Disabled Veteran-Owned Small Business (SDVOSB) that is an authorized reseller for brand name TrustWave DbProtect term software licenses with maintenance and technical support.

TrustWave DbProtect licensing and support are proprietary and can only be procured directly from an authorized TrustWave provider. Because the database security environment relies on TrustWave s unique architecture, integrations, and maintenance protocols, any attempt to obtain licensing or support through an alternate source would result in delays, incompatibility risks, and unacceptable gaps in security coverage. Cynergy is the current provider and will ensure uninterrupted protection of mission critical systems.

Without the required TrustWave DbProtect licensing, the VA would be unable to perform essential database vulnerability scans, leaving critical systems unmonitored. This inability to assess and identify security risks would place the VA s data and infrastructure under undue and unacceptable risk. No other brand name database vulnerability scanning platform is interoperable with VA s existing TrustWave DbProtect infrastructure, database structures, and software application programming interfaces due to the proprietary constraints of the TrustWave infrastructure currently implemented within VA.

Specifically, due to the proprietary constraints within the software source code, any other Original Equipment Manufacturer s (OEM) solution would not be able to communicate with the VA s existing TrustWave software licenses to provide the necessary database scanning and database vulnerability data collection, as well as critical updates, patches, updates to TrustWave DbProtect's Shatter Knowledge database, and bug fixes needed to ensure the infrastructure continues to function as intended.