Security Information Event Management Software
Overview
Settle Signals
Market intelligence for public sector sales teams
RFP Hunter shows what is open. Settle shows what is forming.
Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.
SUMMARY
KEY REQUIREMENTS
CONTRACT DURATION
TIMELINE
Responses are due by July 28th, 2026.
Continuous Monitoring Integration Plan due within 60 days of installation.
SOAR Readiness Assessment due within 90 days of installation.
UBA implementation roadmap due within 90 days of installation.
QUESTION DEADLINE
CONTACTS
Primary procurement contact — name, title, email, and phone
Additional decision-makers and their departments
Issuing Agency
Department of Veterans Affairs
DESCRIPTION
The issuing organization is seeking a security information event management (SIEM) software solution. The requested platform must support isolated, self-hosted, non-SaaS deployment in air-gapped environments, including the ability to apply manual updates for patches, threat intelligence libraries, and vulnerability definitions.
The solution must support a fully container-native architecture, with deployment of components as Docker containers using vendor-provided images. It should consolidate events across multiple sites into a single console, provide a common taxonomy of events, and retain both normalized and original raw event log formats for forensic purposes. The system must also allow customization to normalize and aggregate event fields beyond out-of-the-box normalized fields.
In addition, the platform must support forensic investigations during security incidents, including event timeline reconstruction, identification of compromised accounts or systems, log integrity verification, and export of evidence in standard formats. It must natively ingest unstructured and schemaless data, including formats such as PDF, DOCX, and TXT, without requiring vendor services, and support information collected from industry-standard vulnerability scanners, including vulnerability scanning and vulnerability database updates.
Similar RFPs
Frequently asked questions
- When is the submission deadline?
- This RFP closed on July 23, 2026 and is no longer accepting submissions.
- Who issued this RFP?
- It was issued by Department of Veterans Affairs. The work is located in Boston, Massachusetts, United States; Pittsburgh, Pennsylvania, United States.
- Who is a good fit for this opportunity?
- Cybersecurity software vendor specializing in SIEM platforms
- Experience delivering self-hosted, air-gapped, non-SaaS security solutions
- Proven container-native deployment capabilities using Docker
- Strong expertise in log management, event normalization, and multi-site monitoring
- Demonstrated forensic investigation and incident response feature set
- Experience integrating vulnerability scanner data and threat intelligence updates
- Ability to support secure deployments for public sector or highly regulated environments
Analysis generated by Settle AI from the source RFP.
RFP Hunter shows what is open. Settle shows what is forming.
Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.