Cloudflare ZTNA Licenses IFB

The North Carolina Department of Information Technology (NCDIT) has issued an Invitation for Bids (IFB) for Cloudflare Zero Trust Network Access (ZTNA) licenses and migration services. The procurement seeks Enterprise licenses for Zero Trust Enterprise User licenses, Data Loss Prevention per seat licenses, Magic WAN and Magic WAN Bandwidth, Enterprise Attribute parts, and FedRAMP Government Service. The contract will scale from 5,500 users in year 1 to 17,000 users by year 3, with a three-year base term and two optional one-year renewal periods. Vendors must provide FedRAMP certification and be capable of handling data classified as High Risk/Program Critical under North Carolina's data classification system. The evaluation will utilize a Best Value Analysis and Lowest Price Technically Acceptable Source Selection method. Bids are due by February 21, 2025, at 2:00 PM Eastern Time, with migration services required in year 1 and optional in year 2. Vendors must submit comprehensive pricing for each component, including unit and extended annual prices across the base term and potential renewal years.

The solicitation encourages participation from Historically Underutilized Businesses (HUBs) and requires vendors to maintain valid E-Verify compliance and current independent third-party security assessments. Vendors must complete a Vendor Readiness Assessment Report and disclose any work to be performed outside the United States. Payment terms are set at Net 30 days after receipt of a correct invoice, with a 10% retainage held until final acceptance unless specifically waived in writing. While specific budget ranges are not explicitly stated, the scaling user licenses from 5,500 to 17,000 suggest a significant contract value for enterprise-level ZTNA and security services. The procurement appears to be a comprehensive security infrastructure upgrade focusing on Zero Trust principles, with a strong emphasis on vendor security credentials, compliance, and scalable licensing models. Potential bidders must demonstrate robust security capabilities, FedRAMP certification, and the ability to support North Carolina's complex enterprise security requirements.