Volexity Volcano and Surge

The Texas Department of Information Resources (DIR) has issued an Invitation for Bid (IFB-023-FY26) for an annual subscription to Volexity Volcano and Surge cybersecurity tools, seeking licensing for advanced volatile memory collection and forensic investigation tools compatible with Windows, Linux, and macOS systems. The procurement specifically includes Volcano One Computer (single device license), Volcano One Floating (cloud-based multi-device license), and Surge Collect Enterprise Team (Medium) Multi-Platforms supporting 500-1,000 annual collections. The solicitation requires comprehensive documentation including Accessibility Conformance Reports, a Policy Driven Adoption for Accessibility self-assessment, and compliance with state government cybersecurity and ethical business practice certifications. Critical bid details include a response deadline of October 22, 2025, at 2:00 PM CT, with an anticipated contract award date of November 13, 2025, and a contract term running from November 13, 2025, through November 12, 2026. Respondents must provide detailed technical documentation demonstrating product capabilities, accessibility standards conformance, and meet various state government vendor performance requirements.

The procurement includes a Historically Underutilized Business (HUB) goal of 21.1%, indicating a preference for diverse vendor participation and potential set-aside considerations for qualifying businesses. Vendors must complete a comprehensive Policy Driven Adoption for Accessibility (PDAA) self-assessment, evaluating their organizational approach to Information and Communications Technology accessibility across six key areas, with scoring ranging from 0 (no plan) to 3 (fully implemented). While specific budget ranges are not explicitly detailed in the provided documents, the procurement appears focused on securing advanced cybersecurity licensing with potential multi-year implementation considerations. The solicitation emphasizes strict compliance with state accessibility standards, cybersecurity protocols, and ethical business practices, suggesting that only vendors with robust technological capabilities and comprehensive organizational accessibility policies will be competitive. Potential respondents must demonstrate not only technical proficiency but also a commitment to inclusive technology development and implementation.