Sonatype Platform Subscription, Support, and Professional Services

The Texas Department of Transportation (TxDOT) is soliciting a comprehensive software supply chain security solution under solicitation number 601440000054652. The objective is to acquire Sonatype Platform subscriptions, support, and professional services to identify, govern, and mitigate risks associated with open-source software components and artifacts. Key deliverables include the implementation of the Sonatype Repository Firewall, IQ Server, and Nexus Repository Pro, along with a specialized Policy Workshop, administrator knowledge transfer sessions, and ongoing technical support. The project must adhere to strict information security standards, including DIR’s Information Security Controls Catalog Standards, and requires the immediate reporting of any cybersecurity incidents. The contract will be awarded based on best value, with a weighted scoring system allocating 60 points to the proposed approach to work and 40 points to price. To be eligible for scoring, respondents must pass a preliminary evaluation requiring all necessary documentation and a vendor performance rating of A, B, or C in the CPA Vendor Performance Tracking System. Submissions must be delivered via email by October 30, 2026, and must include specific sections such as the Execution of Response, Price Schedule, and Approach to Work. The vendor will be required to comply with various nondiscrimination authorities, including Title VI of the Civil Rights Act of 1964, and must ship all goods FOB Destination.