Application Security Testing (AST) Platform

Sacramento County is seeking to enhance its application security posture by procuring an Application Security Testing platform in alignment with the NIST Cybersecurity Framework and the moderate controls outlined in NIST 800-53. As a large governmental entity overseeing multiple departments and critical services, the county must comply with a range of external regulatory standards including PCI DSS, IRS Pub 1075, HIPAA, and CJIS, among others, necessitating robust and comprehensive security measures. The requested platform will support the county’s ongoing efforts to strengthen its cybersecurity resilience across its digital infrastructure, ensuring consistent adherence to both internal framework goals and external compliance obligations. The solicitation, identified as 2026-RFB-0064, was posted on July 7, 2026, with a response deadline of July 30, 2026, and is being managed by the California Department of General Services, Division of Capacity and Performance Support Development in Sacramento. The contract opportunity is open to vendors who can provide a solution capable of integrating securely with the county’s existing systems and supporting enterprise-wide application security testing needs. Primary contact for inquiries is Joseph Sellner, Supervising Analyst, with Daniel Parrish, Contracts Services Officer, available as a secondary point of contact. The place of performance is in California, and the opportunity is targeted toward the state and local government sector.