Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Static & Dynamic Application Security Testing (SAST/DAST) Integration

Active

State & Local

Response Deadline07/30/2026, 12:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract seeks integration of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools into existing CI/CD pipelines to automate the detection of security vulnerabilities in both source code and running applications. The implementation must align with the OWASP Top 10 vulnerability categories and adhere to applicable compliance standards to ensure consistent, scalable security posture across development workflows. The goal is to shift security left in the development lifecycle, reducing exposure to critical threats by identifying and remediating issues early and continuously during deployment cycles. This subcontract is issued under the NAICS code 541511 for Custom Computer Programming Services and is managed by the DGS: CAPSD - Procurement agency based in California. Responses are due by July 30, 2026, with no set-aside designation specified. The place of performance and point of contact details are not provided, and the solicitation is accessible through an online procurement portal. Contractors are expected to deliver a seamless, configurable solution that integrates with current toolchains without disrupting development velocity, while maintaining auditability and reporting capabilities for compliance and risk management purposes.

General Info

Integrate SAST and DAST into CI/CD pipelines to automate OWASP Top 10 vulnerability detection and shift security left.

Agency

California → DGS: CAPSD - ProcurementView Agency

NAICS

541511 - Custom Computer Programming ServicesView NAICS

Place of Performance

CA, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 7

subcontract

Response DeadlineJul 30

Submission deadline

Response Deadline

07/30/2026, 12:00:00 AM UTCin 3 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → DGS: CAPSD - Procurement

ContactsNo contacts available

OfficeN/A

Organization / Agency

California → DGS: CAPSD - Procurement

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Integrate SAST and DAST tools into CI/CD pipelines to automate vulnerability detection in source code and running applications, aligned with OWASP Top 10 and compliance standards.

Similar Contracts

Same NAICS industry code

Smart Room Control System ProgrammingThe contract involves the programming and configuration of a centralized control system designed to manage audiovisual equipment, lighting, blinds, and environmental settings through touch panels and automated logic, ensuring seamless integration and user-friendly operation across facility spaces. The work requires detailed technical expertise in system integration, automation scripting, and user interface design to deliver a responsive and reliable smart room environment tailored to the operational needs of the client. This subcontract is issued by the Government of Jamaica through Tax Administration Jamaica with a posted date of July 24, 2026, and a response deadline of August 17, 2026, at 3:00 PM. The North American Industry Classification System code 541511 indicates it falls under custom computer programming services. All work must be performed in alignment with the client’s specifications without predefined location details, and the opportunity is open to qualified subcontractors seeking to provide specialized automation solutions for government facilities.

Tax Administration Jamaica

POSTED

DEADLINE

Minority-Owned and Small Business Participation (MBE/DBE/WBE)This contract invites certified Minority Business Enterprises, Disadvantaged Business Enterprises, and Women Business Enterprises to participate in technical and service roles under a subcontract awarded by the Georgia World Congress Center Authority. The opportunity is designed to support minority- and small business involvement through Georgia state incentives and requires strict compliance with state-mandated participation goals and reporting standards. Eligible firms are encouraged to submit proposals by the deadline of August 31, 2026, to engage in work categorized under NAICS code 541511, which pertains to custom computer programming services, and may include related technical support and professional services aligned with the Authority's operational needs. Participation is contingent upon maintaining active certification and adhering to all state compliance protocols throughout the subcontract term.

Georgia World Congress Center Authority

POSTED

DEADLINE

in about 1 month

Interactive Virtual Tour Platform DevelopmentThe Georgia World Congress Center Authority is seeking a vendor to design and develop a custom web-based platform to host and deliver a 360-degree virtual tour experience with interactive navigation, embedded hotspots, and full mobile responsiveness. The project requires the creation of a fully functional digital environment that enables seamless user interaction across devices, incorporating intuitive controls, visual hotspots for contextual information, and adaptive design to ensure optimal performance on smartphones, tablets, and desktops. The platform must be built to support high-quality immersive content while maintaining fast load times and accessibility standards. The contract is classified as a subcontract under NAICS code 541511 for custom computer programming services, with a response deadline of August 31, 2026. The solicitation was posted on July 24, 2026, and is managed through the Georgia state procurement portal. While the agency’s physical location and point of contact details are not specified, performance of the work is expected to support the authority’s digital outreach and visitor engagement initiatives. Vendors must deliver a turnkey solution that meets technical and functional requirements without reliance on third-party platforms, ensuring full ownership, maintenance readiness, and long-term scalability.

Georgia World Congress Center Authority

POSTED

DEADLINE

in about 1 month

Parking Enforcement and Impound Management System ReplacementThe City of Prince Albert is soliciting proposals to replace its current Ticket Tracer application with a modern Parking Enforcement and Impound Management System that meets current operational needs and supports future growth. The system must fully handle parking enforcement workflows, including ticket issuance, violation processing, and impound management, while integrating seamlessly with existing city infrastructure and ensuring data accuracy and accessibility for staff and the public. Vendors are expected to provide not only the software solution but also full implementation, training, and ongoing technical support to ensure a smooth transition and sustained functionality. Proposals must be submitted through Vendor Panel Software by the deadline of August 21, 2026, and all inquiries should be directed to Tim Earing at the City of Prince Albert. The solicitation is open to qualified vendors without specific set-aside requirements, and the primary point of contact is available via email and phone for clarification. The system will be deployed and operated within Saskatchewan, with all services and support intended to serve the city’s parking enforcement and impound operations efficiently and reliably. Additional details and submission instructions are available through the provided SaskTenders link.

City of Prince Albert

POSTED

DEADLINE

Electronic Invoicing via WAWF (Wide Area Workflow)All invoices must be submitted electronically through the WAWF system in full compliance with Department of Defense invoicing regulations, ensuring accurate and complete documentation to support payment processing. Contractors are required to adhere strictly to DoD standards for invoice formatting, supporting materials, and submission timelines to avoid delays or rejections. Payment tracking and reconciliation must be conducted through the Defense Finance and Accounting Service to ensure timely and accurate disbursement. This subcontract, identified under NAICS code 541511, is administered by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense, with all activities tied to electronic invoicing compliance. The solicitation was posted on July 24, 2026, and responses are due by August 7, 2026, with no set-aside designation specified. Access to additional details is available through the provided DIBBS portal link.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Electronic Invoicing and WAWF Integration ServicesThe contract seeks support for electronic invoicing through the Wide Area WorkFlow system, requiring seamless integration with EDI and FTP submission protocols to facilitate automated invoice processing. The provider must ensure full connectivity with SAM.gov for vendor verification and DIBBS for accurate delivery documentation tracking, enabling end-to-end compliance with Department of Defense invoicing standards. This subcontract is designated as a Women-Owned Small Business Set-Aside under NAICS code 541511, which aligns with information technology and software development services geared toward government systems integration. The opportunity was posted on July 24, 2026, with a firm response deadline of July 29, 2026, and is managed by the Strategic Acquisition Program Directorate under the Department of Defense. Performance of the work is not tied to a specific location, allowing for remote or distributed execution, provided all technical and compliance requirements are met. All submissions must be completed through the Defense Logistics Agency’s DIBBS platform via the official solicitation link. The contract emphasizes secure, reliable, and timely data exchange between federal systems, with a focus on eliminating manual processes and enhancing accountability across the invoicing and delivery verification lifecycle.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Cybersecurity Compliance & NIST SP 800-171 ImplementationThe contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard Covered Defense Information as mandated by DFARS clause 252.204-7012. This subcontract is focused on ensuring full compliance with federal cybersecurity standards for information systems handling sensitive defense data, with strict obligations to protect, detect, and respond to threats against information assets. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and aligns with NAICS code 541511 for Computer Systems Design Services. All cybersecurity measures must be fully operational and auditable to meet Department of Defense requirements, with no flexibility permitted in adherence to the prescribed controls. The contract was posted on July 24, 2026, with a firm response deadline of July 29, 2026, indicating a highly time-sensitive procurement process. It is issued under the Department of Defense, specifically through the Construction & Equipment T & IFO EQ office, and is structured as a subcontract, meaning the performer will be supporting a prime contractor or larger acquisition effort. While the solicitation number and point of contact details are not provided, the official reference is available via the DIBBS portal under RFQ SPE8EN26T1885. Performance will require documented evidence of control implementation, continuous monitoring, incident reporting readiness, and the ability to undergo compliance assessments at any time. Failure to meet any requirement could result in contractual penalties or termination.

CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

DEADLINE

System Integration and Data MigrationThe contract entails the integration of a new grant system with existing state databases and platforms, requiring the development of robust APIs to enable seamless communication between systems and the secure migration of legacy data to ensure continuity and accuracy. The project demands technical expertise in system interoperability, data mapping, and transformation processes to align historical information with the new architecture while maintaining data integrity and compliance with state standards. Work must be performed in Boston, Massachusetts, with a strict deadline for responses set for August 22, 2026, and is classified as a subcontract under NAICS code 541511, indicating it falls under custom computer programming services. The contracting entity is the Massachusetts Economic Development agency, and all deliverables must support the agency’s mission to modernize grant administration through technology enhancements.

EED01 - Economic Development

POSTED

DEADLINE

IT Project Management and Implementation SupportThe contract involves end-to-end project management for implementing a grant management system, covering all phases from initial planning through deployment, with a focus on coordinating stakeholders, conducting thorough testing, delivering training, and ensuring smooth system rollout. The work is categorized as a subcontract under NAICS code 541511, indicating it falls under custom computer programming services, and is tied to the Economic Development agency in Massachusetts, with the place of performance centered in Boston, zip code 02108. The solicitation was posted on July 24, 2026, and proposals must be submitted by August 22, 2026, at 12:30 AM, with no set-aside type specified, meaning the contract is open to any eligible subcontractor regardless of business size or classification. The project requires comprehensive expertise in managing complex IT implementations within a public sector funding environment, demanding strong organizational skills, clear communication, and proven experience in similar government systems deployments.

EED01 - Economic Development

POSTED

DEADLINE

EOED RFR Grant Management SystemThe solicitation BD-27-1100-EED01-EED01-131710, titled EOED RFR Grant Management System, is issued by the Massachusetts Economic Development Office (EED01) based in Boston, MA, and is exclusively accessible through the COMMBUYS procurement portal. The posting date is July 24, 2026, with a firm response deadline of August 22, 2026, at 12:30 AM Eastern Time. All communications, including questions, must be submitted exclusively via the COMMBUYS Q&A function; no phone calls or emails are permitted. The solicitation falls under NAICS code 541511 for custom computer programming services and is categorized as a solicitation with no set-aside designation. The place of performance is clearly identified as Boston, Massachusetts, with a ZIP code of 02108. The primary point of contact is Daniel Billings, titled as Purchaser. No contract value, pricing details, or line-item specifications are provided in the documentation; vendors are expected to submit pricing through the COMMBUYS quote interface, but no CLINs, SLINs, or cost breakdowns are included in the solicitation itself. The statement of work, detailed deliverables, technical specifications, and performance requirements for the grant management system are not detailed in the available materials, leaving the scope of the system’s functionality undefined in this public document. The solicitation references required attachments such as the Commonwealth Terms and Conditions, W9 form, EFT form, and essential bid forms, which must be uploaded through the COMMBUYS Attachments tab with appropriate confidentiality markings if applicable. No formal evaluation factors, weights, adjectival ratings, or award methodology (LPTA or best value) are outlined, and the basis of award remains unspecified. There are no explicit packaging, marking, preservation, or MIL-STD requirements; no FOB terms, period of performance dates, or option periods are defined; and no contracting officer, COR, COTR, or payment office information is provided. Representation and certification requirements under Section K, including UEI, size status, or socioeconomic certifications, are not included in the available documents. The only administrative guidance specifies that proposals must be submitted through COMMBUYS using its multi-tab interface and that non-compliance with required forms or failure to mark confidential documents properly may result in disqualification. All contractual clauses

EED01 - Economic Development

POSTED

DEADLINE

LPR Software Configuration and Network OptimizationThe contract involves the configuration and optimization of license plate recognition software to ensure accurate and real-time performance in a government surveillance environment. Key tasks include fine-tuning LPR software settings, calibrating surveillance cameras for optimal image capture under varying lighting and weather conditions, adjusting network parameters to support low-latency data transmission, and implementing performance enhancements to maximize system reliability and recognition accuracy. The work is critical to supporting law enforcement and national security operations through dependable automated vehicle identification. This subcontract is issued under the Ministry of National Security of the Government of Jamaica, with a NAICS code of 541511 indicating it falls within the computer systems design and related services category. The solicitation was posted on July 24, 2026, and the performance location is not specified, suggesting work may be conducted remotely or at multiple sites under the agency’s jurisdiction. The contract emphasizes technical expertise in video analytics, network infrastructure, and real-time data processing to ensure seamless integration with existing security systems. No set-aside provisions or specific point of contact are provided in the public record.

Ministry of National Security

POSTED

DEADLINE

Supplier Diversity Program (SDP) Participation CoordinationThe contract requires a certified diverse business, such as an MBE, WBE, VBE, SDVOBE, or LGBTBE, to partner with a prime contractor to meet a 1% Supplier Diversity Program (SDP) spending obligation under a subcontract arrangement. The engagement is tied to a project managed by the Massachusetts Department of Elementary and Secondary Education, with performance located at Santilli Highway in Everett, Massachusetts, 02149. The business must be properly certified to verify its diverse status and will be expected to deliver services aligned with the NAICS code 541511, which pertains to computer systems design and related services. The opportunity was posted on July 24, 2026, and responses are due by September 1, 2026, at 5:00 PM, with no set-aside designation specified. Participation is focused on fulfilling diversity spend targets rather than direct procurement of goods or services, making coordination and documentation of expenditures critical to compliance.

DOE02148 - Department of Elementary and Secondary Education

POSTED

DEADLINE

in about 1 month

More opportunities from California → DGS: CAPSD - Procurement

Same awarding agency

Traffic Signal PartsThe County of Sacramento Department of Transportation is soliciting bids for the supply of traffic signal parts on an as-needed basis through a discount-from-catalog pricing model. Vendors are required to offer percentage discounts off their published catalogs for specific product categories rather than quoting individual line items, streamlining procurement and ensuring consistent pricing. The contract will cover a wide range of components including signal heads, pedestrian indications, wiring, detection systems, poles, mounts, push buttons, RRFB equipment, and related accessories essential to the operation and maintenance of the County’s traffic signal network. Multiple awards are anticipated to allow SACDOT to leverage different suppliers based on availability, delivery speed, or urgency, enhancing responsiveness and reliability. The contract term is set to commence on September 7, 2026, and conclude on September 6, 2027, with an option to renew annually for up to four additional one-year periods contingent on performance, funding, and mutual agreement. All awarded contracts must comply with the County’s Contract and Purchasing Services Division terms, safety standards, and applicable laws. This solicitation is part of the Sacramento County Procurement Alliance, a cooperative purchasing initiative that enables the County and other governmental, educational, and nonprofit entities to benefit from pooled buying power and streamlined contracting processes. Selected vendors will gain access to expanded market opportunities beyond SACDOT as participating entities may also utilize the contract. Bids are due by August 21, 2026, and all inquiries should be directed to the Contract Services Officer at the provided contact information.

Electrical Apparatus and Equipment, Wiring Supplies, and Related Equipment Merchant Wholesalers

POSTED

DEADLINE

Developer Training & Adoption SupportThis contract seeks to deliver comprehensive secure coding and AST platform training to developers through a combination of workshops, detailed documentation, and continuous support to increase adoption rates and minimize false positives in code analysis results. The training initiatives are designed to empower development teams with the knowledge and tools needed to integrate security best practices into their daily workflows, ensuring higher code quality and reduced vulnerability exposure. Ongoing support is a critical component, emphasizing sustained engagement rather than one-time instruction to drive long-term behavioral change and platform utilization. The contract falls under the NAICS code 611430, classifying it as a training and education service, and is structured as a subcontract. It was posted on July 7, 2026, with a response deadline of July 30, 2026, and is managed by the California Department of General Services under the CAPSD Procurement division. Performance location details are unspecified, but the initiative is focused on supporting developers within the agency’s ecosystem, with no set-aside provisions specified. Interested parties must respond through the provided public procurement portal before the deadline to be considered for award.

Professional and Management Development Training

POSTED

DEADLINE

Security Tool Integration (CrowdStrike, Tanium, Splunk)The contract requires the integration of the AST platform with CrowdStrike Falcon, Tanium, and Splunk to establish a unified security monitoring and alerting environment. This effort focuses on enabling seamless, secure data sharing among these leading cybersecurity tools to enhance threat detection, incident response, and operational visibility across the enterprise. The integration must support real-time correlation of alerts, automated workflows, and centralized dashboards to improve the efficiency and accuracy of security operations. The work falls under NAICS code 541512 for custom computer programming services and is structured as a subcontract with a response deadline of July 30, 2026. The procurement is managed by California’s DGS: CAPSD - Procurement office, though no specific location or point of contact is provided. The scope emphasizes technical interoperability, data integrity, and system compatibility, requiring vendors to demonstrate expertise in API-based integrations, security protocol alignment, and large-scale security platform deployments. While no set-aside provisions are specified, the project demands specialized skills in cybersecurity infrastructure and a proven ability to deliver complex system integrations under strict operational requirements.

Computer Systems Design Services

POSTED

DEADLINE

FedRAMP/StateRAMP Compliance & Authorization SupportThe contract seeks a subcontractor to support the achievement of FedRAMP and StateRAMP readiness within 90 days and full authorization within 12 months by implementing required security controls, completing comprehensive documentation, and coordinating with a third-party assessment organization. The effort must align with federal and state cloud security standards to ensure compliance through systematic control execution and evidence gathering, with all activities timed to meet strict regulatory milestones. The work is scoped around technical and procedural readiness for authorization, emphasizing collaboration with external assessors and adherence to established federal risk management frameworks. The contract is issued under NAICS code 541611 for management consulting services by the California Department of General Services, specifically the CAPSD Procurement division. It is open for response until July 30, 2026, with no set-aside designation, and performance is expected to be conducted remotely or as required by the project’s compliance needs. All deliverables must be completed within the stated timelines to satisfy both federal and state cloud security authorization requirements, with no specified physical location for performance, allowing flexibility in execution while maintaining rigorous compliance standards.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

AI-Assisted Remediation & Developer GuidanceThe contract seeks the development of AI-driven remediation tools designed to enhance secure code correction by delivering natural language explanations, automated code fixes, and integrated guidance within developer environments. These tools must provide intuitive, context-aware support to help developers identify and resolve security vulnerabilities quickly and accurately, reducing remediation time and improving overall software resilience. The solution should be tightly coupled with common IDEs to ensure seamless integration and adoption by development teams without disrupting established workflows. The contract is structured as a subcontract under NAICS code 541512, pertaining to custom software development services, and is issued by California’s DGS: CAPSD - Procurement office. Proposals must be submitted by July 30, 2026, with no set-aside designation specified. The project emphasizes innovation in artificial intelligence applied to cybersecurity remediation, requiring technical rigor, user-centered design, and measurable improvements in developer efficiency and code security outcomes. All performance is expected to align with California state procurement requirements, though no specific location for performance has been designated.

Computer Systems Design Services

POSTED

DEADLINE

Software Composition Analysis (SCA) & Open-Source Risk ManagementThe contract seeks the implementation of Software Composition Analysis tools to identify, track, and manage open-source components within software systems, ensuring compliance with licensing requirements and detecting known vulnerabilities such as CVEs in third-party libraries. The solution must provide real-time monitoring capabilities and seamless integration into existing development and security workflows to enable immediate response to detected risks, reduce exposure to legal and security liabilities, and maintain uninterrupted software supply chain integrity. The effort is structured as a subcontract under NAICS code 541511, focused on custom software development and integration services, with a response deadline of July 30, 2026. The issuing entity is the California Department of General Services, specifically the CAPSD Procurement division, and performance is expected to align with state-level procurement standards. Although specific geographic or contact details are not provided, the project requires a vendor capable of delivering an automated, scalable, and actionable SCA platform that operates continuously within the client’s development lifecycle without disruption.

Custom Computer Programming Services

POSTED

DEADLINE

Application Security Testing (AST) PlatformSacramento County is seeking to enhance its application security posture by procuring an Application Security Testing platform in alignment with the NIST Cybersecurity Framework and the moderate controls outlined in NIST 800-53. As a large governmental entity overseeing multiple departments and critical services, the county must comply with a range of external regulatory standards including PCI DSS, IRS Pub 1075, HIPAA, and CJIS, among others, necessitating robust and comprehensive security measures. The requested platform will support the county’s ongoing efforts to strengthen its cybersecurity resilience across its digital infrastructure, ensuring consistent adherence to both internal framework goals and external compliance obligations. The solicitation, identified as 2026-RFB-0064, was posted on July 7, 2026, with a response deadline of July 30, 2026, and is being managed by the California Department of General Services, Division of Capacity and Performance Support Development in Sacramento. The contract opportunity is open to vendors who can provide a solution capable of integrating securely with the county’s existing systems and supporting enterprise-wide application security testing needs. Primary contact for inquiries is Joseph Sellner, Supervising Analyst, with Daniel Parrish, Contracts Services Officer, available as a secondary point of contact. The place of performance is in California, and the opportunity is targeted toward the state and local government sector.

Computer Systems Design Services

POSTED

DEADLINE