Network Security Software, Hardware, and Services

The Commonwealth of Kentucky Finance and Administration Cabinet, on behalf of the Commonwealth Office of Technology (COT), is requesting bids for network security software, hardware, and services under RFB 758 2700000066, with bids due October 2, 2026 at 1:30 p.m. ET. This is a master agreement procurement serving all state agencies, political subdivisions, school districts, public universities, and local governments statewide; Kentucky resident bidders receive reciprocal preference, and qualified bidders (Kentucky Correctional Industries, Kentucky Industries for the Blind, and eligible nonprofit agencies) receive additional preference points.

The scope encompasses comprehensive network security solutions: software including firewall management (Checkpoint, Fortinet, Palo Alto), web gateways, endpoint security, SSL certificates, data-in-transit encryption, two-factor authentication, and vulnerability testing; hardware including physical firewalls, unified threat management systems, intrusion protection systems, data protection appliances, and email security infrastructure; and associated maintenance, support, training, and implementation services. Vendors must be authorized resellers for all 23 specified manufacturers with formal manufacturer authorization letters or distributor letters required prior to award. All pricing is evaluated as minimum percentage discounts off manufacturer's suggested retail price (MSRP) across five categories: hardware, software, support/maintenance, training, and services.

The initial contract term is two years from award with six optional one-year renewal periods. The award methodology uses best value based on 1,000 points: MSRP discounts (600 points), services hourly rates fully loaded and not-to-exceed (200 points), and best delivery time in business days (200 points). Standard delivery is 15 business days F.O.B. Destination Freight Prepaid with one percent per-day penalty for late delivery. All pricing must be all-inclusive with no separate initiation, setup, installation, or modification fees permitted.

Vendors must maintain Commercial General Liability Insurance ($1 million per occurrence / $2 million aggregate), Professional Liability Insurance ($1 million per claim), Technology Errors & Omissions Insurance ($1 million per claim and aggregate), and Automobile Liability Insurance ($1 million combined single limit if applicable). Service-level agreements require 24/7 technical support with one-hour telephone/email response time and 24-hour on-site resolution capability. Vendors must comply with Kentucky Information Technology Standards (KITS), NIST SP 800-53 moderate-level controls, IRS Publication 1075 safeguards, and maintain all Commonwealth data exclusively within the contiguous United States with encryption for sensitive data in transit and at rest. Pricing must remain firm for 60 days after bid opening. Second-round vendor written questions were due September 18, 2026; Commonwealth responses were posted September 25, 2026. Contact Melissa Hubbard at 502-782-5336.