This Solicitation opportunity from Government of Canada was posted on June 4, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Burp Web Scanning 2026-2029

Closed

2026-050-DAInternational

Submission Closed06/10/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 518210

New

SLED

RightFax FOIP Channel Licensing & ProvisioningThis subcontract opportunity is for the licensing and provisioning of RightFax FOIP enabled fax channels to support prime contractors on projects for the Ohio Bureau of Workers' Compensation. The selected provider must be an authorized RightFax partner responsible for delivering active, licensed, and functional channels, ensuring they are properly configured to integrate with existing network infrastructure and RightFax environments. A critical security requirement of this contract is that all data must remain within the United States. Interested parties must submit their responses by November 10, 2026, to support the Infrastructure and Operations group within the agency.

Bwc300300 Infrastructure And Operations Wgbl, Bwc-bur Of Workers' Compensation

POSTED

DEADLINE

FedRAMP Cloud Infrastructure & Managed HostingThe FedRAMP Cloud Infrastructure and Managed Hosting subcontract supports prime contractors on Department of State APS projects by providing and managing secure cloud environments. Utilizing AWS GovCloud or Azure Government platforms, the contract ensures a highly available hosting environment with a guaranteed 99.9% monthly system availability. To maintain strict security standards, the provider implements encryption and role-based access controls in accordance with 12 FAM 600. This effort falls under NAICS code 518210 and is managed through Acquisitions - Aqm Momentum for the Department of State, with a response deadline set for November 20, 2026.

Acquisitions - Aqm Momentum

POSTED

DEADLINE

Wellness Scheduling Software (SaaS)This subcontract, issued by the Department of the Interior under the Ibc Acq Svcs Directorate, involves the provision of a Software as a Service platform for wellness scheduling. The selected provider will supply and maintain an automated online appointment system designed for prime contractors managing multidisciplinary physical wellness support projects. Key deliverables include a functional booking portal featuring a digital interface for employee scheduling, calendar synchronization, and comprehensive user account management. Due to the nature of health-related scheduling, the platform must maintain strict HIPAA compliance to ensure the security and privacy of sensitive data. The project falls under NAICS code 518210 and was posted on October 27, 2026, with a response deadline of October 29, 2026.

Ibc Acq Svcs Directorate (00004)

POSTED

DEADLINE

Aberdeen Test Center - Data Collection Support Services (DCSS)

Solicitation # W91CRB-26-0000_043711

The U.S. Army Contracting Command, Aberdeen Proving Ground, is conducting market research via a Sources Sought and Request for Information notice to identify qualified providers for Data Collection Support Services (DCSS) at the Aberdeen Test Center. The anticipated requirement is for a single-award IDIQ contract with a five-year ordering period, utilizing firm-fixed-price or cost-plus-fixed-fee CLINs. The primary objective is to secure comprehensive data collection, technical writing, and administrative support across various directorates, including Automotive, Live Fire, Plans and Operations, and Virtual Test and Advanced Electronics and Warfighter. Key tasks involve data compilation, form development, test monitoring, editorial review of electronic and communication systems, computer operations, and range scheduling. Performance will occur primarily at Aberdeen Proving Ground, Maryland, with potential requirements at remote CONUS and OCONUS sites. The prime contractor must maintain a valid Secret Facility Security Clearance, and personnel must be U.S. citizens capable of obtaining Secret clearances. The contract includes a 45-day phase-in and phase-out period, with invoicing handled through the Wide Area Workflow system. Quality assurance will be managed via a Quality Assurance Surveillance Plan, requiring quarterly meetings and human validation of any AI-generated content. Interested respondents under NAICS 518210 must submit their capabilities and business size information by October 29, 2026, to help the government determine if the procurement will be a small business set-aside.

POSTED

DEADLINE

Secure Cloud Hosting and Infrastructure ProviderThe Secure Cloud Hosting and Infrastructure Provider subcontract supports prime contractors on State of Maine registration projects managed by the Motor Vehicles agency. The selected provider is responsible for delivering high-availability hosting environments and robust cybersecurity frameworks, which include the provision of secure cloud platforms, the implementation of comprehensive privacy plans, and the execution of business continuity and disaster recovery strategies. To ensure the highest security standards, the provider must maintain SOC2 compliance and hold security certifications that are either FedRAMP or State-equivalent. This engagement falls under NAICS code 518210 and requires a response by November 4, 2026.

POSTED

DEADLINE

Secure Electronic Application Review PlatformThis subcontract involves the provision and maintenance of a secure electronic application platform for prime contractors working on fellowship projects for the U.S. Department of State, Bureau of Human Resources. The primary objective is to deliver a fully functional, cloud-based review portal equipped with encryption and strict access controls, allowing panel members to score and evaluate applications while remaining compliant with federal data security standards. The project falls under NAICS code 518210 and was posted on October 27, 2026, with a response deadline of November 23, 2026. The contract ensures that the Bureau of Human Resources has a secure environment for managing sensitive application data throughout the review process.

Bureau Of Human Resources

POSTED

DEADLINE

Organizational Analytics Platform RFP

Solicitation # 8559

The University of Louisville is soliciting proposals under solicitation number 8559 for a hosted Organizational Analytics Platform. The objective is to acquire a system for periodic, point-in-time reviews of position structures, staffing levels, management spans, and administrative efficiency. The platform will utilize University-produced flat files, such as CSVs, rather than direct system integration. Key deliverables include position dashboards, spans-and-layers analysis, shared-services analytics, and internal staffing comparisons. The project timeline targets a contract effective date in the week of January 9, 2027, with substantial completion and initial go-live by March 31, 2027, and final completion by April 14, 2027. The University will award the contract based on best value, evaluating proposals across four equally weighted categories at 25 percent each: firm and product experience, technical and functional fit, total cost of ownership, and the implementation and support model. Offerors must submit a technical and financial proposal through the Workday Strategic Sourcing portal by November 9, 2026. Required documentation includes a signed non-collusion statement and a sample contract or subscription agreement. Additionally, the selected provider must ensure compliance with ADA standards and WCAG 2.1 Level AA. All communications must be directed to the contracting officer via the bidding platform.

University of Louisville

POSTED

DEADLINE

Secure Cloud Hosting & Platform SupportThis subcontract for Secure Cloud Hosting and Platform Support provides essential online infrastructure and technical maintenance for prime contractors working with the Alabama State Department of Education, CTE and Workforce Development. The primary scope of work involves providing secure cloud hosting for the ELC platform, managing license authentication and user access for 2,500 users, and utilizing Identity and Access Management systems to ensure consistent platform uptime and security. To maintain the integrity of the environment, the provider must hold specific security certifications, including SOC2, to deliver a functional and accessible online platform. This engagement falls under NAICS code 518210 and is focused on delivering a high-security technical foundation for state educational and workforce development initiatives.

Alabama State Department of Education, CTE \ Workforce Development

POSTED

DEADLINE

MHCC 27-010 Website Maintenance and Support

Solicitation # BPM059075

The Maryland Health Care Commission (MHCC) is soliciting proposals for website maintenance and support services under solicitation BPM059075. This is a Small Business Reserve Procurement limited to certified small businesses. The selected contractor will be responsible for maintaining a publicly available web environment used for disseminating health care information and collecting facility data via web-based surveys. The scope of work includes maintaining the current AWS environment, supporting Drupal 10 and .NET 8.0.27 applications, and providing technical guidance on cloud hosting needs. Key responsibilities encompass infrastructure management, security and compliance, application and database support, and backup and disaster recovery. The contract spans a duration of two years with a pricing structure consisting of Firm Fixed Prices for core deliverables and Time and Materials for specific labor categories, including Solutions Architects and Systems Engineers. The total evaluated price is expected to be at or below $100,000. To be eligible, offerors must demonstrate at least five years of experience meeting NIST, FISMA, or FedRAMP cybersecurity standards and provide three client references. Additionally, the contractor must maintain $1,000,000 in Cyber Security/Data Breach insurance and ensure all services comply with ADA Title II and Section 508 accessibility standards. Proposals are due by October 28, 2026, via the eMaryland Marketplace Advantage portal.

Department of Health - Administration, Boards & Commissions

POSTED

DEADLINE

1Password Management Platfor

Solicitation # FC0003905

Solicitation FC0003905 is a fixed-price request for the procurement of the 1Password Management Platform, a cloud-based security software solution for the Maryland Department of Information Technology. The objective is to implement a centrally managed password manager to standardize secure credential storage across state agencies, thereby reducing cybersecurity risks associated with weak or reused passwords and protecting sensitive citizen information. This is a secondary competition limited exclusively to Master Contractors currently awarded under the Commercial Off-the-Shelf Software (COTS 2012) contract 060B2490021. Eligible bidders must submit their proposals through the eMaryland Marketplace Advantage (eMMA) system by November 4, 2026, at 10:00 AM. Required submission documentation includes a Letter of Authorization from the 1Password manufacturer or distributor and a screenshot of the Manufacturer's Suggested Retail Price. The award will be granted to a responsive and responsible Master Contractor offering the most advantageous price. The contract requires compliance with COMAR 21.05.13.06 and includes a specific Data Use Agreement for SaaS products. Invoicing must be submitted via email and include detailed taxpayer and contract identification, with one-time pricing billed within 30 days of acceptance and annual pricing billed on the anniversary of the contract start.

DoIT - Dept Of Information Technology - Administration

POSTED

DEADLINE

CCaaS Technology ProviderThis subcontract opportunity with the Oklahoma Insurance Department seeks a CCaaS Technology Provider to supply and maintain a cloud-based contact center platform for State-Based Exchange projects. The selected provider will deliver a scalable environment featuring Automatic Call Distribution, Interactive Voice Response, telephony services, queue management, callbacks, and various digital channels to support prime contractors. To ensure security and regulatory adherence, the provider must maintain HIPAA compliance and hold either FedRAMP or StateRAMP certifications. Interested parties should note that the response deadline is November 19, 2026, and the project falls under NAICS code 518210.

Oklahoma Insurance Department

POSTED

DEADLINE

DOT E-ZPASS BACK-OFFICE SYSTEM

Solicitation # 2026-041

The New Hampshire Department of Transportation Bureau of Turnpikes is soliciting proposals under solicitation DoIT 2026-041 for a new E-ZPass Back Office System (BOS). This firm-fixed-price contract seeks a vendor to design, implement, transition, and operate a modern BOS, Call Center, and Walk-In-Centers using a Software as a Service (SaaS) and Infrastructure as a Service (IaaS) model. The scope includes managing electronic tolling revenue collection, invoice and violation processing, and the integration of AI and a redesigned website. The project timeline mandates that design, development, and implementation be completed by June 30, 2030, with a Go-Live date of July 1, 2030. The initial operation and maintenance period runs through June 30, 2035, with the state holding an option for three additional three-year extensions. The selected vendor must adhere to rigorous technical and security standards, including multiple NIST frameworks for cybersecurity, Zero Trust Architecture, and PII privacy protection. System acceptance is phased, requiring successful completion of User Acceptance Testing (UAT) and Operational Acceptance Testing (OAT), with all high-severity issues resolved prior to final acceptance. Proposals are due by January 15, 2027, and will be evaluated on a 200-point scale, with significant weight placed on product demonstrations. The contract is governed by the P-37 State of New Hampshire General Provisions and is subject to the exclusive jurisdiction of the Merrimack County Superior Court.

Department Of Transportation

POSTED

2 days ago

DEADLINE

in 3 months

AI Contract Overview

Toronto Metropolitan University is seeking quotes for Burp Suite DAST, a web application security scanning solution, under solicitation number 2026-050-DA, with a three-year contract term spanning 2026 to 2029. The procurement is conducted through an RFQ process with no negotiations or electronic auction anticipated, and submissions must be made electronically via the BonfireHub portal no later than June 10, 2026 at 11:00 a.m. Eastern Time. Participation requires registration on Merx.com, where procurement documents are hosted and a registration fee applies; these documents take precedence over the notice in case of discrepancies. Evaluation is conducted in two stages: a mandatory Pass/Fail review of the Proposal Acknowledgement Form followed by a price-based assessment where the grand total fees account for 100% of the scoring. The contract is governed by the Canadian Free Trade Agreement and applies to the broader public sector. Payment is structured as an annual fee covering licensing and support services over the full term. All correspondence and inquiries should be directed to Daniya Ahmed at the university’s downtown Toronto address, with bids submitted exclusively through the designated portal. Suppliers are advised to consult the official procurement documents on Merx.com for the most current terms, pricing, and conditions, as details are subject to change.

General Info

Toronto Metropolitan University seeks Burp Suite DAST for three years via RFQ, with electronic submission due June 10, 2026, price-based evaluation, Merx registration required.

Agency

Government of Canada → Toronto Metropolitan University

NAICS

518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

Place of Performance

CAN

Set-Aside

NONE

Documents

No documents available

Documents will appear here when they are available.

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedJun 4

Solicitation

Response DeadlineJun 10

Deadline has passed

Submission Closed

06/10/2026, 04:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyGovernment of Canada → Toronto Metropolitan University

Contacts1 person available

OfficeN/A

Organization / Agency

Government of Canada → Toronto Metropolitan University

Office AddressN/A

Contacts

Daniya AhmedContracting Authority

contact@example.gov

Full Description

Notice of Intended Procurement Name of Procuring Entity Toronto Metropolitan University (the “University”) Contact Person and Contract Person Coordinates Daniya Ahmed, 1 Dundas St West, 16th Floor, Toronto, ON, M5B 2H1, +1 (555) 000-0000 ext. 553496 Procurement Documents The procurement documents are available at www.merx.com. Note that obtaining access to the procurement documents will require prospective suppliers to register and pay a registration fee. Pricing and Payment Terms are available on the MERX website. Description of Procurement The University is conducting a Request for Quote (RFQ) for Burp Suite DAST (web application security scanning software and related services) to support vulnerability assessment, security testing, and the ongoing protection of university systems and applications. The procurement will include a three-year commitment for licensing and support services, paid annually. The procurement is not anticipated to involve negotiation. An electronic auction is not anticipated. Address and Final Date for Submissions Submissions must be submitted electronically at https://tmu.bonfirehub.ca/opportunities/107012 on or before June 10, 2026 at 11:00:00 am. The submissions will not be opened publicly. Conditions for Participation The procurement is subject to the following conditions for participation: Stage 1 - Mandatory Evaluation Criteria: CRITERIA - WEIGHTING (POINTS) File #1 – Proposal Acknowledgement Form Pass/Fail Stage 2 – Price Evaluation Criteria: CRITERIA - WEIGHTING (POINTS) File #2 - Fees - Grand Total - 100 Total Evaluated Score - 100 Applicable Trade Agreements This procurement is subject to the following trade agreement(s): Broader Public Sector (BPS) Canadian Free Trade Agreement (CFTA) Quebec/Ontario Contract Details The term of the Final Agreement is (3) years. Notes Suppliers should note that information contained within this notice is subject to change. Suppliers are encouraged to obtain the procurement documents which contain the most current information. If there is a conflict between the procurement documents and this notice, the procurement documents will take precedence. Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.