Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Voting System Security and Source Code Review

Active

State & Local

Response Deadline11/18/2026, 12:00:00 AM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for the California Secretary of State involves providing specialized security analysis and source code reviews for prime contractors managing voting system projects. The scope of work includes conducting penetration testing to uncover vulnerabilities, reviewing encrypted source code, and ensuring the implementation of multi-factor authentication and encryption for data both at rest and in transit in accordance with SAM section 5300. The selected vendor must sign a non-disclosure agreement and is responsible for delivering detailed work papers along with Security and Telecommunications Test Reports. This opportunity falls under NAICS code 541512 and was posted on November 3, 2026, with a response deadline of November 18, 2026.

General Info

Agency

California → Secretary of State

NAICS

541512 - Computer Systems Design Services

Place of Performance

CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 26-007.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFQ #26-007 - Smartmatic VSR1 2.1 Voting System

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 3

subcontract

Response DeadlineNov 18

Submission deadline

Response Deadline

11/18/2026, 12:00:00 AM UTCin 15 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia → Secretary of State

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia → Secretary of State

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security analysis and source code review for prime contractors on California Secretary of State voting system projects. Conducts penetration testing to identify vulnerabilities and reviews encrypted source code. Implements multi-factor authentication (MFA) and encryption for data at rest and in transit per SAM § 5300. Requires Vendor NDA. Delivers Security and Telecommunications Test Reports and detailed work papers.

Similar Contracts

Same NAICS industry code

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

about 6 hours ago

DEADLINE

CAT INTELLIGENT TRANSPORTATION SYSTEM (ITS)

Solicitation # RFP 27-17

Charlottesville Area Transit (CAT) is soliciting proposals for the purchase, delivery, installation, and maintenance of a comprehensive Intelligent Transportation System (ITS), specifically focusing on Computer-Aided Dispatch (CAD) and Automatic Vehicle Location (AVL) systems. The project aims to modernize transit operations for a fleet of 47 vehicles, improving real-time operational management and rider information through cloud-based software and integrated hardware. The contract is structured as a one-year base term with four optional one-year renewals. The scope includes the replacement of various onboard components such as interior LED signage, cellular routers, and CAD/AVL equipment, while existing AngelTrax surveillance cameras and public address systems will remain in place. The procurement allows for partial-component proposals, though preference is given to offerors providing a complete, integrated solution. Key technical requirements include GTFS/GTFS-Realtime integration, ADA-compliant automated vehicle announcements, and preferred integration with Microsoft Entra ID for single sign-on and multifactor authentication. While the replacement of exterior destination signs and Urban Transportation Associates (UTA) passenger-counting equipment is not mandatory, vendors may propose these as separately priced options. The City will evaluate proposals based on technical approach (35%), qualifications and experience (25%), implementation and project management (20%), and total five-year proposed price (20%). The successful contractor must adhere to Federal Transit Administration (FTA) clauses, including Build America, Buy America (BABA) requirements and strict nondiscrimination standards. Following system go-live, CAT will conduct a six-week acceptance testing period to ensure full functionality before final acceptance. Pricing must be itemized to distinguish one-time implementation and hardware costs from recurring annual licensing and maintenance fees. Proposals must be submitted electronically via the OpenGov portal by November 9, 2026.

Charlottesville Area Transit

POSTED

about 7 hours ago

DEADLINE

Cryptographic Inventory & Asset DiscoveryThis subcontract opportunity, titled Cryptographic Inventory and Asset Discovery, is issued by the Government of Ontario through the Public and Business Service Delivery and Procurement agency. The project focuses on performing comprehensive audits and discovery of cryptographic assets for prime contractors involved in Post-Quantum Cryptography projects. The scope of work includes scanning networks for cryptographic protocols, identifying hard-coded keys, and mapping encryption points for data-at-rest and data-in-transit to document overall cryptographic agility. The successful contractor will be responsible for delivering a detailed Cryptographic Inventory Report and a comprehensive Asset Map. This procurement falls under NAICS code 541512 and is based in Canada. The solicitation was posted on November 2, 2026, with a response deadline set for November 30, 2026.

Public and Business Service Delivery and Procurement

POSTED

about 8 hours ago

DEADLINE

Post-Quantum Cryptography Readiness and Migration Planning

Solicitation # 22327

The Government of Ontario, through the Public and Business Service Delivery and Procurement agency, has issued Request for Information solicitation number 22327 titled Post-Quantum Cryptography Readiness and Migration Planning. This non-binding inquiry seeks marketplace information to support internal planning and potential future procurement regarding enterprise cryptographic discovery and inventory, quantum-related risk and exposure assessments, and cryptographic agility. The Ministry is specifically interested in post-quantum cryptography migration planning, supporting technologies, governance, operational readiness, delivery models, and indicative costs, efforts, and timelines. This process is strictly for information-gathering purposes and does not constitute a competitive procurement or a commitment to purchase goods or services. Interested parties must submit their responses electronically through the Ontario Tenders Portal by the deadline of November 30, 2026. The submission requires a qualification envelope, and while the awarding strategy is listed as no ranking, the primary point of contact for this solicitation is Ngozi Kalu. Performance is expected to take place within the province of Ontario.

Public and Business Service Delivery and Procurement

POSTED

about 8 hours ago

DEADLINE

CMS Integration and Implementation ServicesThe CMS Integration and Implementation Services subcontract involves providing specialized technical integration of CMS software for prime contractors working on San Francisco Municipal Transportation Agency traffic-signal infrastructure projects. The scope of work includes configuring systems, integrating software with field hardware, and migrating data from legacy systems to ensure the delivery of a fully integrated and operational CMS platform. This project is based in San Francisco and falls under NAICS code 541512. Interested parties should note that the solicitation was posted on November 2, 2026, with a response deadline of December 3, 2026.

San Francisco Municipal Transportation Agency

POSTED

about 9 hours ago

DEADLINE

in about 1 month

Microsoft Dynamics CRM Administration & SupportThis subcontract for Microsoft Dynamics CRM Administration and Support involves providing ongoing database management, configuration, and technical support for prime contractors working on Montana Department of Public Health and Human Services projects. The scope of work includes managing user permissions, executing system updates, and troubleshooting database errors to ensure a fully maintained and operational CRM environment. Qualified candidates must hold Microsoft Certified: Dynamics 365 Fundamentals or Professional certifications. The opportunity was posted on November 2, 2026, with a response deadline of November 9, 2026, falling under NAICS code 541512.

POSTED

about 9 hours ago

DEADLINE

Intent to Sole Source Baker Tilly

Solicitation # DPHHS-SolSour-2027-0717DS

The Montana Department of Public Health and Human Services, specifically the Disability Employment and Transitions Division, has issued an intent to award a sole source contract to Baker Tilly under solicitation number DPHHS-SolSour-2027-0717DS. The scope of work focuses on the management and support of the Montana Accessible Communications Dynamics CRM database. This procurement encompasses several key computing service areas, including Software as a Service, cloud services, and analysis, design, and planning services. Posted on November 2, 2026, this notice is not a request for competitive proposals, although potential vendors who believe they can provide an equivalent solution are invited to submit a detailed description of their services by November 9, 2026. All inquiries and responses must be managed through the eMACS system. The primary point of contact for this action is Dale Stout. No specific contract value, period of performance, or detailed evaluation factors have been disclosed at this stage.

POSTED

about 9 hours ago

DEADLINE

Software Testing and Validation ServicesThis subcontract for Software Testing and Validation Services supports prime contractors on projects for the Lincoln Electric System. The selected provider will be responsible for developing and executing comprehensive unit, integration, and User Acceptance Testing procedures across a diverse range of Apple, Android, and Windows handsets. Key deliverables for the engagement include detailed test plans, test scripts, and finalized, signed-off UAT reports. Qualified candidates must hold an ISTQB certification or an equivalent professional software testing credential. The solicitation was posted on November 2, 2026, with a response deadline of January 12, 2027. This opportunity falls under NAICS code 541512 and is focused on ensuring the quality and functionality of software deployments within the Nebraska region.

Lincoln Electric System

POSTED

about 9 hours ago

DEADLINE

SAP/Esri Systems Integration SpecialistThis subcontract opportunity for the Lincoln Electric System seeks an SAP/Esri Systems Integration Specialist to manage technical integrations between mobile solutions and systems of record. The primary scope of work involves configuring data flows between mobile tools and SAP EAM/IS-U, integrating Esri ArcGIS web maps, and mapping data to support migrations for SAP S/4HANA and the Esri Utility Network. The ultimate goal is the delivery of a fully integrated and tested data pipeline connecting mobile front-end tools with back-end systems. Qualified candidates must be SAP Certified Integration Architects. Interested parties should note that the response deadline is January 12, 2027. This project falls under NAICS code 541512 and is focused on ensuring seamless data interoperability for prime contractors operating on Lincoln Electric System projects.

Lincoln Electric System

POSTED

about 9 hours ago

DEADLINE

Mobile Work Management

Solicitation # 001-27

Lincoln Electric System is soliciting proposals for the licensing and implementation of a modern, mobile-friendly software solution to replace the end-of-life SAP Work Manager. The objective is to execute asset work management activities in the field while maintaining SAP EAM, IS-U, and Esri ArcGIS as the systems of record. The selected solution must be compatible with Windows, Android, and Apple devices and be designed to minimize future re-work during upgrades to SAP S/4HANA and Esri Utility Network. The project is slated for a preferred start in April 2027, with a mandatory go-live date no later than September 2028. The contract will be awarded to the respondent whose proposal best complies with the requirements, with price serving as a significant but not sole factor. Evaluation criteria include total anticipated costs, respondent and staff qualifications, and potential virtual interviews or demonstrations for top-scoring bidders. Bidders must submit a comprehensive proposal by January 12, 2027, including a transmittal letter, organizational profile, and detailed pricing across project, software, and optional service categories. Key contractual obligations include adherence to the laws of the State of Nebraska and strict compliance with a Confidentiality and Security Agreement. Insurance requirements specify statutory Workers Compensation and $500,000 limits for Employers Liability, General Aggregate, and Professional Liability. The vendor is responsible for developing robust testing procedures, including unit, integration, and user acceptance testing within the LES environment. Payment will be made within 30 days of approved itemized invoices, and LES retains the right to suspend work for up to 90 consecutive days.

Lincoln Electric System

POSTED

about 9 hours ago

DEADLINE

Surveillance Equipment Setup and IntegrationThis subcontract for Surveillance Equipment Setup and Integration supports prime contractors on projects for the Ohio Attorney General’s Office BCI Investigations North. The scope of work involves the initial setup and configuration of 5G surveillance cameras, including the management of user interfaces via SSH and HTTPS. Technical requirements include integrating equipment with the IoT Portal and Microhard NMS, as well as establishing firewall ACLs and VPN tunneling to ensure secure connectivity. The contractor is responsible for verifying system reliability by testing load balancing and 5G/4G LTE failover capabilities. The final deliverable consists of fully configured and tested surveillance cameras that are ready for immediate deployment. This opportunity falls under NAICS code 541512 and was posted on November 2, 2026, with a response deadline of November 17, 2026.

Ago461400 Bci Investigations North Bciihq, Ago-attorney General

POSTED

about 9 hours ago

DEADLINE

Software Configuration and Database IntegrationThis subcontract for Software Configuration and Database Integration supports prime contractors on Illinois Department of Transportation software projects. The scope of work involves performing technical configuration and systems integration, specifically linking commercial off-the-shelf software to the State of Illinois employee database using APIs and schemas. Key deliverables include the establishment of executive dashboards, escalation notifications, and approval workflows, alongside the provision of software security management assurance to ensure a fully configured and live integrated system. The opportunity is managed by the Illinois Finance and Administration agency under NAICS code 541512. Interested parties should note that the solicitation was posted on November 2, 2026, with a response deadline of November 19, 2026.

FINADMIN494 - Finance & Administration

POSTED

about 9 hours ago

DEADLINE

More opportunities from California → Secretary of State

Same awarding agency

Voting System Hardware EvaluationThe Voting System Hardware Evaluation is a subcontract opportunity with the California Secretary of State focused on the physical and technical testing of voting system hardware. The selected vendor will support prime contractors by utilizing specialized diagnostic equipment to conduct reliability and physical stress tests. Key deliverables for this engagement include comprehensive Hardware Test Reports and all associated supporting work papers. This project falls under NAICS code 541330 and requires the vendor to sign a Non-Disclosure Agreement. Interested parties must submit their responses by the deadline of November 18, 2026. Further details regarding the solicitation can be accessed through the CalProcure portal.

Engineering Services

POSTED

about 5 hours ago

DEADLINE

Usability and Accessibility (ADA) TestingThis subcontract opportunity involves providing specialized usability, accessibility, and privacy testing for prime contractors working on voting system projects for the California Secretary of State. The selected vendor will be responsible for evaluating system interfaces to ensure strict compliance with Section 508 and WCAG accessibility standards, while also verifying that voter privacy protections are maintained. The primary deliverables for this engagement are comprehensive Usability, Accessibility, and Privacy Test Reports. The project falls under NAICS code 541511 and requires the vendor to sign a Non-Disclosure Agreement. Interested parties must submit their responses by November 18, 2026, following the posting date of November 3, 2026. Further details regarding the solicitation can be accessed through the Cal eProcure portal.

Custom Computer Programming Services

POSTED

about 5 hours ago

DEADLINE

Voting System Functional and Volume TestingThis subcontract involves providing functional and volume testing services for prime contractors working on California Secretary of State voting system projects. The selected vendor will develop and execute test plans aligned with California Voting Systems Standards Section 2 to ensure system accuracy, efficiency, and stability under maximum load. Technical requirements include proficiency with Microsoft server and workstation operating systems as well as SQL Server. The project requires strict adherence to data protection standards, including a Vendor NDA and compliance with SAM Section 5300. Key deliverables for the engagement consist of comprehensive Functional and Volume Test Plans and Final Test Reports. The solicitation was posted on November 3, 2026, with a response deadline of November 18, 2026, under NAICS code 541519.

Other Computer Related Services

POSTED

about 5 hours ago

DEADLINE

RFQ #26-007 - Smartmatic VSR1 2.1 Voting System

Solicitation # 26-007

The California Secretary of State is soliciting a state approved testing agency to provide voting system test support services for the evaluation of the Smartmatic VSR1 2.1 voting system. The primary objective is to determine the system's suitability for use in California by conducting functional, hardware, and volume testing, as well as usability, accessibility, and privacy evaluations. All testing must adhere to the California Voting Systems Standards and relevant sections of the California Elections Code. The contractor will also be responsible for providing support and presentations for public hearings. The anticipated period of performance is from January 2, 2027, through January 1, 2029. This is a low-cost award based on a pass/fail evaluation of administrative and technical requirements. Mandatory qualifications for the contractor include extensive experience in voting technology system design, security analysis, source code review, and government-level testing, with specific requirements ranging from three to six years of experience in these areas. Additionally, the contractor must demonstrate proficiency with Microsoft server and workstation operating systems and SQL server. The contract includes strict confidentiality requirements via non-disclosure agreements and requires compliance with California civil rights laws and non-discrimination programs. Payment is contingent upon satisfactory performance and the submission of itemized invoices.

Testing Laboratories and Services

POSTED

about 5 hours ago

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS