Sonatype Platform Subscription, Support, and Professional Services

Texas Department of Transportation (TxDOT) is soliciting offers under Request for Offer (RFO) 601440000054652 for Sonatype Platform subscriptions, support, and professional services, with responses due October 30, 2026 at 3:00 p.m. Central Time and a tentative award date of November 2, 2026. The solicitation is classified as an emergency purchase under Texas Government Code Section 2155.137. Its Preferences Schedule has every checkbox blank, so no statutory preference applies.

TxDOT seeks a software supply chain security solution to identify, govern, monitor, and mitigate risks in open-source components and software artifacts. Required items are Sonatype Repository Firewall (300 units), IQ Server, Nexus Repository Pro, Guide Pro+ (90,000 tokens per month), and a Sonatype Policy Workshop, plus repository security governance and developer guidance. Bidders must demonstrate at least two years of Sonatype Platform Subscription experience within the past five years. Awardees must meet encryption standards for sensitive and confidential data, pass background checks for personnel accessing TxDOT systems, and certify cybersecurity training.

The contract term is one year from execution, and TxDOT may unilaterally extend for periods not to exceed one year. Evaluation weights the proposed approach at 60 points and price at 40 points. Pricing must be firm and all-inclusive, with unit prices extended by quantity, and any line item priced at $0.00 is non-responsive. Delivery is FOB Destination with the vendor bearing shipping. Required submissions include a completed Excel price schedule, Preferences, Pricing, Child Support Obligation, Assumptions, and Exceptions schedules, an approach document, and an artificial intelligence usage explanation. Responses go by email to purchaser Vanessa Spurlock, CTCD, CTCM, in PDF format not exceeding 20 MB. TxDOT reserves the right to hold presentations, negotiate, and request best and final offers before award.