Application Security Testing (AST) Platform

Closed State & local contract opportunity Posted

Solicitation number
2026-RFB-0064
State
California
Responses due

Opportunity facts

NIGP codes
Show all 11
UNSPSC codes
Show all 28
Point of contact

Opportunity details come from procurement.opengov.com. Updated .

About this opportunity

Written by GovTribe AI ·

Sacramento County Contract & Purchasing Services Division is requesting bids for an Application Security Testing (AST) platform on behalf of the Department of Technology under RFB #2026-RFB-0064, with bids due July 29, 2026 at 5:00 PM and a mandatory pre-bid meeting July 8, 2026 at 11:00 AM via Microsoft Teams. A 5% local preference applies to Sacramento County and local Sacramento Regional Market Area businesses, and a 2% micro-business preference is available.

The platform must integrate SAST, DAST, SCA, and AI-assisted vulnerability remediation capabilities to support secure software development across multiple programming languages and development environments. The solution must seamlessly integrate with source-code management systems (GitHub, GitLab, Azure DevOps, Bitbucket) and CI/CD pipelines, support enterprise authentication including SSO with role-based access control and centralized administration, and provide robust audit, compliance, and operational security reporting. Preference is given to solutions with FedRAMP or GOVRAMP authorization. The platform must support developer-centric or application-centric licensing models.

Proposers must demonstrate at least three years of company viability with commitment to Application Security Testing platforms and provide at least three customer references, with at least two from public sector organizations. The contract includes a minimum 12-month warranty following formal final system acceptance. Payment terms are NET/30. The County requires minimum $2 million Commercial General Liability, Professional Liability, and Cyber Liability insurance. Questions are due July 15, 2026 at 5:00 PM. Award is anticipated August 3, 2026. All responses become public records under the California Public Records Act except information legally justified as confidential.

Opportunity text

The Sacramento County Contract & Purchasing Services Division is releasing a Request for Bid (RFB) on behalf of the Department of Technology to procure an Application Security Testing (AST) platform capable of supporting secure software development across multiple programming languages and development environments. The solution must provide integrated capabilities for Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and AI‑assisted remediation to identify, prioritize, and remediate vulnerabilities throughout the development lifecycle. The platform should offer seamless integration with modern source‑code management systems and CI/CD pipelines, support enterprise authentication (including SSO), and include licensing models appropriate for developer‑centric or application‑centric usage. Preference will be given to solutions with FedRAMP or GOVRAMP authorization and robust reporting suitable for audit, compliance, and operational security functions.

Files

File Type Posted
Customer_References.docx DOCX document
Application_Security_Testing_(AST)_Platform.pdf PDF

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Similar opportunities
  • Ask GovTribe AI about this opportunity
Try for free Login