Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Application Control and Zero Trust Security Services

Active
State & Local

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Application Control and Zero Trust Security Services subcontract, issued by the Massachusetts Technology Collaborative, focuses on implementing and managing application control for prime contractors involved in MassCyberCenter grant projects. By utilizing the ThreatLocker technology stack, the project aims to reduce the organizational attack surface, block malicious programs, and contain unauthorized software through the application of Zero Trust principles. The scope of work includes the delivery of an active application control environment and the maintenance of consolidated activity records to ensure compliance and meet insurance requirements. Performance for this contract is centered in Westborough, Massachusetts, under NAICS code 541512.

General Info

MassTechnology Collaborative subcontract for ThreatLocker Zero Trust security services in Westborough, Massachusetts.

Place of Performance

North Drive Westborough, MA, 01581, USA

Set-Aside

NONE

Documents

This scope was carved out of BD-26-1367-1367C-1367L-126829.

The full solicitation package (87 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

2026-Cyber-01 Notice of Funding Opportunity for Cyber Resilient Massachusetts

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyMassachusetts Technology Collaborative
ContactsNo contacts available
OfficeN/A
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implements and manages application control for prime contractors on MassCyberCenter grant projects. Utilizes the ThreatLocker technology stack to contain unauthorized software, block malicious programs, and reduce the organizational attack surface based on Zero Trust principles. Delivers an active application control environment and consolidated activity records for compliance and insurance purposes.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
Federal
Defense Health Agency (DHA), Portfolio Acquisition Executive, Medical Digital Solutions (PAE MDS), Enterprise Intelligence & Data Solutions (EIDS) Program Management Office (PMO), Data Exchange Services Operations, Modernization, and Development
Solicitation # HT003826SC005-AOI0002
The Defense Health Agency (DHA), through the Enterprise Intelligence and Data Solutions (EIDS) Program Management Office, is seeking commercial solutions for the operations, sustainment, modernization, and development of the Data Exchange Platform (DxP). This initiative, published under Commercial Solutions Opening HT003826SC005, aims to maintain mission-essential legacy services—including the Data Exchange Services (DES), Central Health Data Repository (CHDR), and ACS-DAL environments—while transitioning to a scalable, cloud-native, API-driven architecture. Key technical objectives include adopting FHIR R4 and OMOP CDM standards, implementing Zero Trust security, and evolving toward AI/ML-ready capabilities to support secure interoperability between the DHA, Department of Veterans Affairs, and other federal healthcare partners. The procurement follows a multi-phase evaluation process, with Phase I responses due by October 28, 2026. Phase I submissions are evaluated on a Go/No-Go basis focusing on technical feasibility, operational strategy for zero-disruption modernization, commercial maturity, and security alignment. While the government anticipates a Firm-Fixed-Price structure and a 12-month base period, the final award instrument may be a FAR-based contract or a prototype other transaction agreement, with an anticipated award date of March 2027. Selected vendors must demonstrate a robust DevSecOps approach and a realistic staffing pipeline meeting necessary security clearance and facility access criteria.
Defense Health Agency

POSTED

about 10 hours ago

DEADLINE

in about 20 hours
View Details
NAICS: 541512
New
Federal
REQUEST FOR INFORMATION - FDIC OCOO Enterprise Systems Modernization
Solicitation # FDIC-COOS-1
The Federal Deposit Insurance Corporation is issuing a sources-sought Request for Information under solicitation number FDIC-COOS-1 to modernize the Office of the Chief Operating Officer Enterprise Systems. The agency is seeking industry input on tools, implementation strategies, and architectures to redesign functional capabilities across human resources, financial management, acquisition, learning and development, physical security, and crisis readiness and response. A primary focus of this effort is the integration of Super Intelligence to enhance decision support, predictive analytics, and workflow automation, ensuring compliance with 15 U.S.C. § 9401(3) and the Executive Order dated September 29, 2026. Additionally, the solution must support future interoperability with the Physical Access Converged Enterprise Solution. Interested respondents must submit their information in PDF format by October 26, 2026, at 13:00 UTC, with a total page limit of 20 pages. Submissions should include company identification such as the UEI and CAGE code, strategic recommendations for solution architectures, and non-binding rough order of magnitude estimates for software, implementation, and sustainment. This RFI is intended for market research and planning purposes to inform future procurement and does not constitute a formal solicitation or a contract award. Performance is expected to be centered in Arlington, Virginia.
_

POSTED

about 10 hours ago

DEADLINE

in 6 days
View Details
NAICS: 541512
New
Federal
TOTAL ENGINEERING AND INTEGRATION SERVICES (TEIS) IV On-Ramp Opportunity
Solicitation # W91RUS27RA001
The Total Engineering and Integration Services (TEIS) IV program is a multiple-award IDIQ contract providing information systems engineering and information technology support services to the United States Army Information Systems Engineering Command (USAISEC). The program scope covers the full project life cycle, including planning, design, development, implementation, procurement, logistics, testing, and sustainment of information and communication systems. These services are required worldwide, including in remote or hostile locations. The contract has a maximum ceiling of 800 million dollars, with a base ordering period of five years ending November 30, 2026, and a possible five-year optional extension. Award decisions are based on the best value proposal, with technical approach being the most significant factor, followed by past performance and small business participation, and finally cost/price. Technical evaluations focus heavily on sample tasks, including cybersecurity engineering, satellite communications, and IT modernization. Due to the nature of the work, strict security requirements are in place, including the need for Top Secret facility clearances, adherence to Intelligence Community Directives for Sensitive Compartmented Information (SCI) facilities, and the execution of non-disclosure agreements. Contract administration is managed by the Army Contracting Command, Aberdeen Proving Ground, with invoicing processed through the Wide Area WorkFlow system.
W6QK Acc-Apg Contr Ctr

POSTED

about 10 hours ago

DEADLINE

in 3 days
View Details
NAICS: 541512
New
SLED
VCU-216931312JC
Solicitation # 216931312JC
Virginia Commonwealth University is soliciting proposals for the procurement and implementation of a comprehensive, web-based Recreation Management System to support RecWell operations across five facility locations and approximately 50 workstations, including remote access for full-time staff. The selected firm will be responsible for software deployment, configuration, customization, and the migration of data for 30,544 members from the existing Fusion system. Key technical requirements include PCI-compliant payment gateways, integration with FreedomPay and Banner HR/Finance processes, and compatibility with VCU ID proxy readers. The university has set a target go-live date of July 1, and the resulting agreement is expected to have a two-year term with options for up to three one-year renewals. Proposals must be submitted electronically via Smartsheet by October 30, 2026, and will be evaluated based on methodology and approach (35%), qualifications and experience (25%), pricing (25%), and sustainability (5%). Awardees must maintain 5 million dollars in cyber liability coverage for protected data and ensure all technology meets Section 508 accessibility standards. The contract requires adherence to various data privacy laws, including FERPA and HIPAA, and mandates registration in the RealSource source-to-pay platform for invoicing. Firms are required to provide a detailed work plan, three references from comparable clients, and a pricing schedule covering implementation, licensing, cloud hosting, and ongoing maintenance.
Virginia Commonwealth University

POSTED

about 18 hours ago

DEADLINE

in 3 days
View Details
NAICS: 541512
New
International
"Your Education Technology" An Open Framework (PA 2023) for the provision of ICT products, services, and solutions.
Solicitation # 868641
Nexus Multi Academy Trust is establishing an Open Framework under the Procurement Act 2023 to provide a compliant route to market for ICT products, services, and solutions for publicly funded schools and colleges. The framework is divided into three lots: Lot 1 for ICT Support and Managed Services, Lot 2 for Professional Services and consultancy, and Lot 3 for Hardware supply and installation. With an estimated maximum value of 1 billion GBP excluding VAT, the framework will operate for a maximum duration of eight years, running from January 11, 2027, to January 10, 2035. It is designed to be reopened periodically to allow new suppliers to apply, and there is no limit on the number of suppliers appointed to each lot. The procurement process is open to SMEs and VCSEs, with tenders evaluated based on quality (60%), qualitative price (30%), and social value (10%). Call-off contracts may be awarded through a competitive selection process or via direct award under specific conditions, such as when the value is below procurement thresholds or due to technical exclusivity. The framework is structured into eight annual schemes with varying extension options, ranging from no extensions for Scheme 8 to two additional 12-month extensions for Schemes 2 through 6. The deadline for tender submissions is November 11, 2026, at 12:00 pm.
Nexus Multimedia Academy Trust

POSTED

1 day ago

DEADLINE

in 15 days
View Details

More opportunities from Massachusetts Technology Collaborative

Same awarding agency

SLED
Request for Proposals (RFP) Pathmaker Workforce Program
Solicitation # BD-27-1367-1367C-1367L-134625
The Massachusetts Technology Collaborative (MassTech) is soliciting proposals for the Pathmaker Workforce Program, an employer-driven initiative providing direct funding to organizations that build and scale career pathways. The program focuses on preparing individuals from low-income and underrepresented communities for high-demand roles in advanced manufacturing, defense, artificial intelligence, robotics, and technology. To be eligible, programs must incorporate Pathmaker Core Competencies and maintain a partnership with an employer demonstrating a direct hiring need. Success is measured by the ability to place participants into open positions immediately or within three months of completion, with a target graduation rate of at least 60 percent. Awards are determined via a common scoring calculator, with the MassTech Board of Directors making final funding recommendations based on the responsiveness of the application and the applicant's past performance. Selected organizations will enter into a grant agreement and must utilize a standard budget and invoice template for quarterly reporting of labor, subcontractors, and direct costs. Grantees are required to submit annual reports every June 30 and a post-project report one year after the final report to document outcomes and equity metrics. All applications must be submitted through the MassTech online portal by April 16, 2027, and any proprietary information must be explicitly labeled as confidential to be protected under Massachusetts Public Records Law.

POSTED

7 days ago

DEADLINE

in 6 months
View Details
SLED
2026-Cyber-01 Notice of Funding Opportunity for Cyber Resilient Massachusetts
Solicitation # BD-26-1367-1367C-1367L-126829
The Massachusetts Technology Collaborative, through the Mass Cyber Center, has issued Notice of Funding Opportunity 2026-Cyber-01 to provide grants to municipalities, small businesses, and non-profits for the Cyber Resilient Massachusetts Grant Program. The program funds Security Operations Center services, including Managed Detection and Response and other related services provided by CyberTrust Massachusetts. Eligible projects may cover up to three years of services and feature functional capabilities such as automated detection and alerting, application control and zero trust via the ThreatLocker technology stack, and consolidated activity records to support cyber insurance and compliance requirements. Applications are accepted on a rolling basis and are evaluated based on the alignment with MassTech Collaborative goals, the use of non-MassTech funding leverage, and the respondent's lack of state or federal debarment status. Applicants must submit a W-9, a signed Authorized Respondent's Signature and Acceptance Form, and a completed budget template. Small businesses must meet SBA definitions, while municipalities and non-profits must provide specific organizational and demographic data. All submissions are subject to the Massachusetts Public Records Law, though cybersecurity vulnerability assessments are presumptively treated as confidential. Inquiries and applications are managed by the Proposals Department at [email hidden].

POSTED

7 months ago

DEADLINE

in over 3 years
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS