An automated vulnerability remediation toolset to fast track commercial off-the-shelf (COTS) and internally developed containerized software to run in a Big Bang Compliant cATO Platform

The goal of this proposal is to deliver a toolset to speed up the rate at which software can meet USSF compliance standards, have them cATOd, and be delivered into production. Accordingly, this proposal is action and results-orientated. The purpose of this proposal is to deliver an automated toolset along with having at least 5 COTS or internally developed containerized applications, cATOd, and running in production within 24 months of award grant. Once we successfully deliver 5 containerized applications, we will fine-tune the tooling and scale the process to deliver additional applications into production rapidly. The program can then be transitioned to one of the USSF factories, become self-sufficient, and scale. The focus of DoD modernization is on modular, standardized systems that can be accessed through common application portals. To meet these requirements, the software must run in DoD reference architectures like Big Bang, and/or SpaceCamp’s Big Bang variant called Gravity, meet all cATO compliance guidelines, be deployed either on-prem or in private cloud, and made available to end users – be they on base, remote users, or industry partner users. The ability to minimize contracting timescales to procure the software rapidly is also a key problem being addressed.  The intention is that both commercial vendors and internal software factory developers will have significant tooling to help them reduce the costs and timescales of getting cATO approval and software delivered rapidly.