CLOUD-NATIVE APPLICATION PROTECTION PLATFORM

Ontario Health, an agency of the Government of Ontario, is soliciting a Cloud-Native Application Protection Platform (CNAPP) under solicitation number RFP-2026-190-009330. The primary objective is to implement a solution that provides centralized security, visibility, and risk management across Azure and AWS cloud environments. The scope of work includes the delivery of platform subscriptions, implementation and onboarding services, ongoing support, maintenance, and optimization services. Key technical capabilities required include cloud security posture management, workload protection, identity and entitlement management, data and Kubernetes security, vulnerability and exposure management, runtime protection, compliance monitoring, attack path analysis, API security, and DevSecOps scanning. The procurement process requires proponents to submit proposals divided into qualification, technical, and commercial envelopes. Mandatory requirements, technical experience, pricing, references, and key personnel lists must be provided through specific schedules (Schedules D, E, F, G, H, and I). The response deadline is November 23, 2026, at 4:00 PM. While the awarding strategy is listed as no ranking, the evaluation will be based on mandatory requirements, technical experience, and pricing. The primary point of contact for this solicitation is Guillermo Rauseo.