This Solicitation opportunity from North Carolina was posted on June 15, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Web Application Firewall (WAF)

Closed

72-PJTH26087State & Local

Submission Closed07/15/2026, 07:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 518210

New

SLED

RightFax FOIP Channel Licensing & ProvisioningThis subcontract opportunity is for the licensing and provisioning of RightFax FOIP enabled fax channels to support prime contractors on projects for the Ohio Bureau of Workers' Compensation. The selected provider must be an authorized RightFax partner responsible for delivering active, licensed, and functional channels, ensuring they are properly configured to integrate with existing network infrastructure and RightFax environments. A critical security requirement of this contract is that all data must remain within the United States. Interested parties must submit their responses by November 10, 2026, to support the Infrastructure and Operations group within the agency.

Bwc300300 Infrastructure And Operations Wgbl, Bwc-bur Of Workers' Compensation

POSTED

DEADLINE

FedRAMP Cloud Infrastructure & Managed HostingThe FedRAMP Cloud Infrastructure and Managed Hosting subcontract supports prime contractors on Department of State APS projects by providing and managing secure cloud environments. Utilizing AWS GovCloud or Azure Government platforms, the contract ensures a highly available hosting environment with a guaranteed 99.9% monthly system availability. To maintain strict security standards, the provider implements encryption and role-based access controls in accordance with 12 FAM 600. This effort falls under NAICS code 518210 and is managed through Acquisitions - Aqm Momentum for the Department of State, with a response deadline set for November 20, 2026.

Acquisitions - Aqm Momentum

POSTED

DEADLINE

Wellness Scheduling Software (SaaS)

Ibc Acq Svcs Directorate (00004)

POSTED

DEADLINE

Aberdeen Test Center - Data Collection Support Services (DCSS)

Solicitation # W91CRB-26-0000_043711

The U.S. Army Contracting Command, Aberdeen Proving Ground, is conducting market research via a Sources Sought and Request for Information notice to identify qualified providers for Data Collection Support Services (DCSS) at the Aberdeen Test Center. The anticipated requirement is for a single-award IDIQ contract with a five-year ordering period, utilizing firm-fixed-price or cost-plus-fixed-fee CLINs. The primary objective is to secure comprehensive data collection, technical writing, and administrative support across various directorates, including Automotive, Live Fire, Plans and Operations, and Virtual Test and Advanced Electronics and Warfighter. Key tasks involve data compilation, form development, test monitoring, editorial review of electronic and communication systems, computer operations, and range scheduling. Performance will occur primarily at Aberdeen Proving Ground, Maryland, with potential requirements at remote CONUS and OCONUS sites. The prime contractor must maintain a valid Secret Facility Security Clearance, and personnel must be U.S. citizens capable of obtaining Secret clearances. The contract includes a 45-day phase-in and phase-out period, with invoicing handled through the Wide Area Workflow system. Quality assurance will be managed via a Quality Assurance Surveillance Plan, requiring quarterly meetings and human validation of any AI-generated content. Interested respondents under NAICS 518210 must submit their capabilities and business size information by October 29, 2026, to help the government determine if the procurement will be a small business set-aside.

POSTED

DEADLINE

Secure Cloud Hosting and Infrastructure ProviderThe Secure Cloud Hosting and Infrastructure Provider subcontract supports prime contractors on State of Maine registration projects managed by the Motor Vehicles agency. The selected provider is responsible for delivering high-availability hosting environments and robust cybersecurity frameworks, which include the provision of secure cloud platforms, the implementation of comprehensive privacy plans, and the execution of business continuity and disaster recovery strategies. To ensure the highest security standards, the provider must maintain SOC2 compliance and hold security certifications that are either FedRAMP or State-equivalent. This engagement falls under NAICS code 518210 and requires a response by November 4, 2026.

POSTED

DEADLINE

Secure Electronic Application Review Platform

Bureau Of Human Resources

POSTED

DEADLINE

Organizational Analytics Platform RFP

Solicitation # 8559

The University of Louisville is soliciting proposals under solicitation number 8559 for a hosted Organizational Analytics Platform. The objective is to acquire a system for periodic, point-in-time reviews of position structures, staffing levels, management spans, and administrative efficiency. The platform will utilize University-produced flat files, such as CSVs, rather than direct system integration. Key deliverables include position dashboards, spans-and-layers analysis, shared-services analytics, and internal staffing comparisons. The project timeline targets a contract effective date in the week of January 9, 2027, with substantial completion and initial go-live by March 31, 2027, and final completion by April 14, 2027. The University will award the contract based on best value, evaluating proposals across four equally weighted categories at 25 percent each: firm and product experience, technical and functional fit, total cost of ownership, and the implementation and support model. Offerors must submit a technical and financial proposal through the Workday Strategic Sourcing portal by November 9, 2026. Required documentation includes a signed non-collusion statement and a sample contract or subscription agreement. Additionally, the selected provider must ensure compliance with ADA standards and WCAG 2.1 Level AA. All communications must be directed to the contracting officer via the bidding platform.

University of Louisville

POSTED

DEADLINE

Secure Cloud Hosting & Platform SupportThis subcontract for Secure Cloud Hosting and Platform Support provides essential online infrastructure and technical maintenance for prime contractors working with the Alabama State Department of Education, CTE and Workforce Development. The primary scope of work involves providing secure cloud hosting for the ELC platform, managing license authentication and user access for 2,500 users, and utilizing Identity and Access Management systems to ensure consistent platform uptime and security. To maintain the integrity of the environment, the provider must hold specific security certifications, including SOC2, to deliver a functional and accessible online platform. This engagement falls under NAICS code 518210 and is focused on delivering a high-security technical foundation for state educational and workforce development initiatives.

Alabama State Department of Education, CTE \ Workforce Development

POSTED

DEADLINE

MHCC 27-010 Website Maintenance and Support

Solicitation # BPM059075

The Maryland Health Care Commission (MHCC) is soliciting proposals for website maintenance and support services under solicitation BPM059075. This is a Small Business Reserve Procurement limited to certified small businesses. The selected contractor will be responsible for maintaining a publicly available web environment used for disseminating health care information and collecting facility data via web-based surveys. The scope of work includes maintaining the current AWS environment, supporting Drupal 10 and .NET 8.0.27 applications, and providing technical guidance on cloud hosting needs. Key responsibilities encompass infrastructure management, security and compliance, application and database support, and backup and disaster recovery. The contract spans a duration of two years with a pricing structure consisting of Firm Fixed Prices for core deliverables and Time and Materials for specific labor categories, including Solutions Architects and Systems Engineers. The total evaluated price is expected to be at or below $100,000. To be eligible, offerors must demonstrate at least five years of experience meeting NIST, FISMA, or FedRAMP cybersecurity standards and provide three client references. Additionally, the contractor must maintain $1,000,000 in Cyber Security/Data Breach insurance and ensure all services comply with ADA Title II and Section 508 accessibility standards. Proposals are due by October 28, 2026, via the eMaryland Marketplace Advantage portal.

Department of Health - Administration, Boards & Commissions

POSTED

DEADLINE

1Password Management Platfor

Solicitation # FC0003905

Solicitation FC0003905 is a fixed-price request for the procurement of the 1Password Management Platform, a cloud-based security software solution for the Maryland Department of Information Technology. The objective is to implement a centrally managed password manager to standardize secure credential storage across state agencies, thereby reducing cybersecurity risks associated with weak or reused passwords and protecting sensitive citizen information. This is a secondary competition limited exclusively to Master Contractors currently awarded under the Commercial Off-the-Shelf Software (COTS 2012) contract 060B2490021. Eligible bidders must submit their proposals through the eMaryland Marketplace Advantage (eMMA) system by November 4, 2026, at 10:00 AM. Required submission documentation includes a Letter of Authorization from the 1Password manufacturer or distributor and a screenshot of the Manufacturer's Suggested Retail Price. The award will be granted to a responsive and responsible Master Contractor offering the most advantageous price. The contract requires compliance with COMAR 21.05.13.06 and includes a specific Data Use Agreement for SaaS products. Invoicing must be submitted via email and include detailed taxpayer and contract identification, with one-time pricing billed within 30 days of acceptance and annual pricing billed on the anniversary of the contract start.

DoIT - Dept Of Information Technology - Administration

POSTED

DEADLINE

CCaaS Technology ProviderThis subcontract opportunity with the Oklahoma Insurance Department seeks a CCaaS Technology Provider to supply and maintain a cloud-based contact center platform for State-Based Exchange projects. The selected provider will deliver a scalable environment featuring Automatic Call Distribution, Interactive Voice Response, telephony services, queue management, callbacks, and various digital channels to support prime contractors. To ensure security and regulatory adherence, the provider must maintain HIPAA compliance and hold either FedRAMP or StateRAMP certifications. Interested parties should note that the response deadline is November 19, 2026, and the project falls under NAICS code 518210.

Oklahoma Insurance Department

POSTED

DEADLINE

DOT E-ZPASS BACK-OFFICE SYSTEM

Solicitation # 2026-041

The New Hampshire Department of Transportation Bureau of Turnpikes is soliciting proposals under solicitation DoIT 2026-041 for a new E-ZPass Back Office System (BOS). This firm-fixed-price contract seeks a vendor to design, implement, transition, and operate a modern BOS, Call Center, and Walk-In-Centers using a Software as a Service (SaaS) and Infrastructure as a Service (IaaS) model. The scope includes managing electronic tolling revenue collection, invoice and violation processing, and the integration of AI and a redesigned website. The project timeline mandates that design, development, and implementation be completed by June 30, 2030, with a Go-Live date of July 1, 2030. The initial operation and maintenance period runs through June 30, 2035, with the state holding an option for three additional three-year extensions. The selected vendor must adhere to rigorous technical and security standards, including multiple NIST frameworks for cybersecurity, Zero Trust Architecture, and PII privacy protection. System acceptance is phased, requiring successful completion of User Acceptance Testing (UAT) and Operational Acceptance Testing (OAT), with all high-severity issues resolved prior to final acceptance. Proposals are due by January 15, 2027, and will be evaluated on a 200-point scale, with significant weight placed on product demonstrations. The contract is governed by the P-37 State of New Hampshire General Provisions and is subject to the exclusive jurisdiction of the Merrimack County Superior Court.

Department Of Transportation

POSTED

1 day ago

DEADLINE

in 3 months

AI Contract Overview

The University of North Carolina Wilmington is soliciting proposals from qualified vendors to provide a cloud-based Web Application Firewall (WAF) solution along with associated implementation services. This initiative aims to replace the university's current on-premises F5 infrastructure, which supports various web applications via reverse proxy, load balancing, TLS termination, and firewall functions. The transition to a cloud-based platform is part of UNCW’s broader technology modernization strategy, designed to enhance web application security, improve system resiliency, and reduce reliance on local hardware. The desired WAF solution must offer comprehensive protection for web applications, be compatible with both on-premises and cloud-hosted environments, integrate smoothly with existing security monitoring systems, and provide an efficient administrative interface. The selected vendor will be responsible for delivering a proof of concept, managing the full implementation process, including migration planning and testing, and providing necessary training to university staff before transitioning the operations to production. The contract is open for proposals until mid-July 2026, and the main point of contact for this solicitation is Justin Hewett. The project will be performed within North Carolina and supports UNCW’s goal of creating a more secure and scalable web application infrastructure on a cloud platform.

General Info

UNCW seeks vendors for cloud-based WAF solution implementation, replacing on-premises F5 infrastructure.

Agency

North Carolina → Unc - Wilmington

NAICS

518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

Place of Performance

NC, USA

Set-Aside

NONE

Documents

RFP 72-PJTH26087 Addendum 1 for Web Application Firewall

amendment

High

RFP 72-PJTH26087 Web Application Firewall (WAF) UNC Wilmington

rfp

High

AI Contract Breakdown

Uniform Contract Format

Timeline

PhaseClosed

PostedJun 15

Solicitation

Response DeadlineJul 15

Deadline has passed

Submission Closed

07/15/2026, 07:00:00 PM UTC

Find active opportunities like this

Start your free trial to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyNorth Carolina → Unc - Wilmington

Contacts1 person available

OfficeNC, USA

Organization / AgencyNorth Carolina → Unc - Wilmington

Office AddressNC, USA

Contacts

Justin Hewett

Full Description

The University of North Carolina Wilmington (UNCW) is seeking proposals from qualified vendors to provide a cloud-based Web Application Firewall (WAF) solution and related implementation services. The selected solution will replace UNCW's existing on-premises F5 environment and provide web application security, load balancing, traffic management, and related functionality for university-hosted services. UNCW currently utilizes an F5 platform to support multiple web applications and services through reverse proxy, load balancing, TLS termination, and web application firewall capabilities. As part of its technology modernization efforts, UNCW intends to migrate these services to a cloud-based platform that enhances security, improves resiliency, and reduces reliance on on-premises infrastructure. The University seeks a solution that provides robust web application protection, supports both on-premises and cloud-hosted applications, integrates with existing security monitoring tools, and offers a streamlined administrative experience. The selected vendor will be responsible for supporting a proof of concept, implementation, migration planning, testing, training, and transition to production operations.