UNSPSC 43233200: Security and protection software

File security or data security software are used to prevent access to files or data by allowing only authorised users to access them. They employ password protection or encryption methods on files or data to do their job.

UNSPSC 43233200 Security and protection software is a Class code covering endpoint detection and response platforms, identity and access management suites, privileged access management tools, digital privacy protection services, and specialized security software—products state and local governments deploy to detect threats, manage credentials, and protect sensitive data across cloud and on-premises environments. Recent solicitations show state and local buyers acquiring CAD/AVL dispatch security integrations, zero-trust PAM systems, managed detection and response subscriptions, and compliance-monitoring software tailored to healthcare, transit, education, and public-safety operations.

State agencies (Texas, California, Washington, Maryland), counties (Orange, Hillsborough, Collier), cities (Philadelphia, Alexandria, Tucson, Tarpon Springs), school districts (Jordan), and regional transit authorities (DASH, Maritime Metro Transit) are active under this code. The City of Philadelphia appears frequently as a repeat buyer of software renewals and support contracts. Texas procures at scale for criminal justice, education, and environmental compliance; California manages statewide managed cybersecurity services across four categories covering MFA, incident response, anti-phishing, and endpoint detection. Geographic activity concentrates in Texas, California, Florida, and Washington, with secondary activity in Illinois, Colorado, and the mid-Atlantic. Recent opportunities include the City of Alexandria soliciting CAD/AVL system replacement for DASH (RFP 2009, due August 18, 2026); the Texas Department of Criminal Justice requesting a Learning Management System with TX-RAMP Level 2 certification and 3% VetHUB subcontracting (RFO 696-TL-26-O020, due August 6); Orange County, Florida acquiring NodeZero penetration testing (ITB070120262, due July 24) and Darktrace threat detection (ITB070120263, due July 24); and the California Department of Technology managing CALNET Managed Cybersecurity Services across four tiered categories with multiple-award intent and small-business preferences (IFB C5-CMCS-G1-26, due September 14). Security incident response, mandatory breach notification timelines, NIST alignment, and FedRAMP or state-equivalent compliance are routine contract drivers.