Application Security Testing Platform
Overview
Settle Signals
For public sector sales teams
The bids are decided before the RFP is written
By the time an RFP like this posts, the winner has usually helped shape it. Settle shows your team the opportunities forming in your market before they become RFPs — so the next one never catches you late.
SUMMARY
KEY REQUIREMENTS
TIMELINE
Release Project Date: July 7th, 2026
Pre-Bid Meeting (Mandatory): July 8th, 2026
Question Submission Deadline: July 15th, 2026
Addendum Issued (if necessary): July 24th, 2026
Submission Deadline: July 29th, 2026
Award Contract: August 3rd, 2026
QUESTION DEADLINE
CONTACTS
Primary procurement contact — name, title, email, and phone
Additional decision-makers and their departments
Issuing Agency
County Of Sacramento
DESCRIPTION
The issuing organization is seeking a vendor to provide an Application Security Testing (AST) platform that supports secure software development across multiple programming languages and development environments. The requested solution must include integrated capabilities for Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and AI-assisted remediation to help identify, prioritize, and remediate vulnerabilities throughout the software development lifecycle.
The platform should integrate with modern source code management systems and CI/CD pipelines, including GitHub, GitLab, Azure DevOps, Bitbucket, and other systems used by agency development teams. It must also support enterprise authentication features such as single sign-on and role-based access control, provide deployment options approved by the agency such as cloud, on-premises, or hybrid, and include dashboards for audit, compliance, and operational security reporting. The solution should support both developer-centric and application-centric licensing models, with clear definitions for usage limits, concurrency constraints, and entitlements.
Vendors are also expected to provide developer-friendly reporting, vulnerability history tracking, severity scoring, findings triage, and AI-assisted remediation guidance such as patch recommendations and code-fix suggestions. Where applicable, the solution should have FedRAMP Moderate or GovRAMP authorization. In addition to the platform itself, the selected vendor must provide onboarding, administrator training, developer enablement sessions, and on-demand learning resources. Questions are due by July 15, 2026, and a mandatory pre-bid meeting will be held on July 8, 2026.
Similar RFPs
Frequently asked questions
- When is the submission deadline?
- Submissions are due July 29, 2026. Questions must be submitted by July 15, 2026.
- Who issued this RFP?
- It was issued by County Of Sacramento. The work is located in Sacramento, California, United States.
- Who is a good fit for this opportunity?
- Cybersecurity software vendor specializing in application security testing platforms
- Proven experience delivering integrated SAST, DAST, and SCA solutions
- Capability to support enterprise CI/CD and source control integrations
- Experience serving government or regulated-sector clients
- FedRAMP Moderate or GovRAMP authorized offering where applicable
- Strong training, onboarding, and developer enablement services
- Flexible deployment support across cloud, on-premises, and hybrid environments
- Expertise in SSO, role-based access control, and compliance reporting
Analysis generated by Settle AI from the source RFP.
Never miss another opportunity you should have won
Create a free account and Settle watches your market for you — search the full database, filter by your criteria, and get every new RFP matched to your business as it posts.