Network Security Software, Hardware, and Services

The Commonwealth of Kentucky Finance and Administration Cabinet, on behalf of the Commonwealth Office of Technology, is soliciting bids for network security software, hardware, and services under RFB 758 2700000066, with bids due October 9, 2026 at 1:30 PM ET. This is a master agreement intended to serve all state agencies, political subdivisions, school districts, public universities, and local governments.

Vendors must bid all line items or face disqualification. Kentucky resident bidder reciprocal preference and preferences for qualified bidders, including Kentucky Correctional Industries and Kentucky Industries for the Blind, apply under state statute.

The scope encompasses comprehensive network security solutions: firewall management (Checkpoint, Fortinet, Palo Alto), endpoint security, SSL certificates, two-factor authentication, vulnerability testing, web gateways, data-in-transit encryption, and physical hardware including firewalls, unified threat management systems, intrusion protection systems, and email security appliances. Vendors must be authorized resellers for all products, with proof required by formal manufacturer authorization letters or signed reseller agreements prior to award. The bid sheet specifies 23 manufacturers, including Algosec, Broadcom, Check Point, DigiCert, Elastic, Endgame, Entrust, Exabeam, Forcepoint, Fortinet, Mandiant, Microsoft Exchange, Okta, Open Text, Palo Alto, Proofpoint, Rapid7, RSA, Tenable, TrendMicro, Varonis, and WebInspect. Vendors must also provide 24/7 maintenance, support, training, and implementation services with no separate charges for setup, installation, modifications, or feature additions.

The initial contract term is two years from award with optional renewal for six additional one-year periods. The evaluation uses best-value scoring across 1,900 total points: minimum percentage discount off manufacturer's suggested retail price (600 points), software pricing (300 points), hardware pricing (300 points), services hourly rates fully loaded and not-to-exceed (200 points), delivery time in business days (200 points), training services (100 points), and expedited delivery bonus points (100 points). Standard delivery is fifteen business days after order receipt; late deliveries incur a one percent daily invoice deduction. Pricing must remain firm for 60 days following the bid due date and be submitted electronically through the Commonwealth eProcurement system. Vendors must be registered in the Vendor Self Service System and submit Kentucky Tax Registration Form 10A100, Secretary of State registration for foreign entities, required affidavits, and proof of authorized reseller status prior to award. Commercial general liability insurance of at least $1,000,000 per occurrence and $2,000,000 aggregate is required, with additional automobile liability and professional liability coverage as applicable. Melissa Hubbard at 502-782-5336 serves as the sole procurement contact. Questions were due September 18, 2026; Commonwealth responses to the second set of vendor questions were provided by September 25, 2026.