Active SLED Opportunity · NEW YORK · NEW YORK

    Web Application & API Protection (WAAP) Solution

    Issued by Power Authority of New York
    stateRFPnew yorkSol. 2136895
    Open · 17d remaining
    DAYS TO CLOSE
    17
    due Jul 31, 2026
    PUBLISHED
    Jul 10, 2026
    Posting date
    JURISDICTION
    new york
    state
    NAICS CODE
    541512
    AI-classified industry

    AI Summary

    NYPA seeks proposals for a Web Application and API Protection solution to enhance cybersecurity. The process includes supplier qualification, a 30-day proof of concept, and potential contract award for a 3-year term. Services include software, implementation, training, and support.

    Opportunity details

    Solicitation No.
    2136895
    Type / RFx
    RFP
    Level
    state
    Published Date
    July 10, 2026
    Due Date
    July 31, 2026
    NAICS Code
    541512AI guide
    Jurisdiction
    new york
    Agency
    Power Authority of New York

    Description

    THE NEW YORK POWER AUTHORITY (HEREAFTER, THE "AUTHORITY" OR "NYPA") INVITES YOU TO SUBMIT A PROPOSAL TO FURNISH ALL SUPERVISION, LABOR, MATERIALS AND EQUIPMENT (EXCEPT FOR SERVICES, MATERIALS AND/OR EQUIPMENT TO BE FURNISHED BY OTHERS AS SPECIFICALLY REFERRED TO IN THE CONTRACT DOCUMENTS) FOR THE FOLLOWING PROJECT: The Request for Proposal (RFP) seeks a more robust and comprehensive Web Application and API Protection (WAAP) solution. The Cyber Security Operations team currently uses cloud-native solutions and traditional network firewalls to protect external facing resources, which requires attention and can potentially result in coverage gaps. NYPA seeks a sophisticated software solution to consolidate and modernize its current approach to Web Application and API Protection. The goal is to transition to a more sophisticated software solution that reduces the risk of exposure and strengthens the security posture. This change is driven by the need for improved security and alignment with broader organizational goals of risk management. This evaluation has a two‑step process: 1. NYPA will qualify the suppliers for Proof of Concept (POC) Once proposals have been received by the Authority, an evaluation team will review and make recommendations for the next phase of the project. The committee may schedule oral interviews and/or product demonstrations, either virtual or in person at the Authority’s White Plains Office with one or more responding vendors to gain clarification as needed. All key members must attend. The committee will shortlist qualified Suppliers and then conduct a 30 day proof of concept (PoC) trial. Initial cost may be provided. The committee will be performing the evaluation of the qualification proposals which will include but are not limited to the following evaluation criteria: A. Quality & Alignment to NYPA Needs of Proposed Web Application and API Protection Solution B. Project History – Including projects in NY State C. Qualifications D. Quality and Completeness of Submittal E. Results of solution presentations & Demonstrations F. Results of Reference Checks G. Result of 30 day proof of concept setup Please note the items above are not exhaustive and the detailed solution requirements are documented on the Attachment 2 Core Capabilities tab. Please respond to all business and technical questions in detail as they are critical considerations. All answers must be based on the capabilities of the current production release of your software and not based on functionality that is in development or scheduled for a future release. If so, please specify. 2. Upon Successful completion of the POC, NYPA will choose which supplier(s) to award or will conduct further negotiations as necessary. All bidders must provide a proposal for the following in connection with their proposed solution(s): · Trial/POC · Software/Software Licenses · Software Implementation & Professional Services · Training · Software Support/Maintenance Location of Event: Enterprise wide NYPA Proposed Term: (3) years Bidders must have commensurate experience. Bidders are hereby directed to make use of the New York Power Authority's website at www.nypa.gov in order to obtain instructions on participating in the bidding process through Ariba. Bidders obtaining bid documents from sources other than NYPA Ariba do so at their own risk. Further details on qualifications/requirements can be found in the Bid Documents. This contract may be fulfilled by a Sub-Contract, Joint Venture or Co-Production arrangement. Overall Goal MWBE 0% SDVOB Goals 0% Business enterprises awarded an identical or substantially similar procurement contract within the past five years: None Minority / Women Business Enterprise contracting goals (MWBE) MBE Goal: 0.00% WBE Goal: 0.00% Disadvantaged Business Enterprise contracting goals (DBE) DBE Goal: 0.00%

    Key dates

    1. July 10, 2026Published
    2. July 31, 2026Responses Due

    AI classification tags

    Frequently asked questions

    SLED stands for State, Local, and Education. These are solicitations issued by state governments, counties, cities, school districts, utilities, and higher education institutions — as opposed to federal agencies.

    SamSearch Platform

    Stop searching. Start winning.

    AI-powered intelligence for the right opportunities, the right leads, and the right time.