Zscaler Software License

The Department of Homeland Security’s Office of the Chief Information Officer is procuring Zscaler as a single, cloud-native, SaaS platform through a sole-source justification to fulfill critical cybersecurity and network operations requirements. The solution must integrate Secure Web Gateway, Zero Trust Network Access, Cloud Access Security Broker with Data Loss Prevention, and Digital Experience Monitoring into one unified platform that is FedRAMP authorized and delivered entirely through the cloud without on-premises hardware. Zscaler is the only vendor capable of providing this full suite of capabilities as a single logical stack with a shared agent and control plane, offering scalable support for over 400,000 users, full TLS/SSL inspection at scale, and centralized policy management—all of which are essential for modernizing DHS’s security posture and eliminating reliance on fragmented point solutions. The procurement is being conducted under GSA Schedule 47QSWA18D008F through Carahsoft Technology Corp., the sole authorized government distributor of Zscaler, ensuring direct privity, consistent terms, and accountability. The contract structure includes a 12-month base period with one optional 12-month extension, and performance is designated for Springfield, Virginia, while the contracting office is in Washington, DC. The justification for sole-source acquisition is grounded in technical uniqueness and the unacceptable risks associated with alternatives, including fragmented oversight, increased attack surface, and inconsistent compliance. Price reasonableness is ensured through verification against the GSA Schedule ceiling, but specific dollar amounts are not disclosed. No traditional packaging, marking, or delivery terms apply due to the digital nature of the service, and acceptance is based on compliance with FedRAMP authorization and confirmed operational functionality. The contracting officer determined that the acquisition is not subject to LPTA because value is derived from integrated capability, reduced operational complexity, and risk mitigation rather than lowest price. No formal contract clauses, representations from the offeror, or detailed line-item pricing are provided, as the document centers entirely on the sole-source justification and technical superiority of Zscaler as the only viable solution meeting DHS’s stringent cybersecurity standards.