{"name":"Netify SASE and SD-WAN RFP procurement-readiness validator","canonical_url":"https://netify.co.uk/sase-sd-wan-rfp-builder/","assessment_version":"2026.2","question_bank_version":"2026.1","last_reviewed":"2026-08-26","facts":{"governed_questions":386,"extended_sase_questions":43,"evaluated_providers":30,"procurement_areas":8},"assesses":["organisation and scale","solution scope","current estate","resilience and availability","security, identity and data","operating model and support","migration and implementation","commercial and contractual","supplier evidence","evaluation and scoring","response comparability","vendor neutrality","sector-specific considerations"],"sectors":["healthcare","financial services","retail","manufacturing"],"input":"RFP text supplied by the user. Word, PDF, text and spreadsheet files are converted to text before assessment.","output":"A deterministic 0-100 readiness score, valid-baseline decision, missing-requirement count, section coverage, comparability warnings and canonical question-bank recommendations.","limitations":["Coverage assessment is not legal advice or a guarantee of supplier performance.","The validator does not invent unstated buyer requirements.","Recommendations require buyer approval before inclusion.","Provider matching, downloads and structured responses unlock only after anonymous publication to the Netify Opportunity Board."],"source_data":{"question_bank":"https://netify.co.uk/sase/question-bank.json","methodology":"https://netify.co.uk/sase/methodology.json"},"example":{"input":"Create an SD-WAN RFP for 20 sites. Suppliers should describe their solution and provide pricing.","report":{"assessmentVersion":"2026.2","score":9,"label":"Needs work","wordCount":15,"questionCount":0,"missingRequirementCount":29,"validBaseline":false,"sections":[{"key":"organisation_scale","title":"Organisation and scale","score":33,"covered":["sites, users or devices"],"missing":["sector or operating context","regions or countries"]},{"key":"solution_scope","title":"Solution scope","score":33,"covered":["SASE, SSE or SD-WAN scope"],"missing":["required security components","business outcomes or use cases"]},{"key":"current_estate","title":"Current estate","score":0,"covered":[],"missing":["existing WAN or underlay","cloud, SaaS or application estate","identity, security or operational tooling"]},{"key":"resilience_availability","title":"Resilience and availability","score":0,"covered":[],"missing":["availability or SLA targets","failover or access diversity","performance requirements"]},{"key":"security_identity_data","title":"Security, identity and data","score":0,"covered":[],"missing":["identity and access controls","threat and data controls","logging, compliance or data residency"]},{"key":"operating_model_support","title":"Operating model and support","score":0,"covered":[],"missing":["managed, co-managed or self-managed model","support and service management","roles, reporting or governance"]},{"key":"migration_implementation","title":"Migration and implementation","score":0,"covered":[],"missing":["deployment or migration approach","timeline, phases or milestones","pilot, cutover, rollback or training"]},{"key":"commercial_contractual","title":"Commercial and contractual","score":33,"covered":["pricing or total cost"],"missing":["licensing or contract term","exit, liability or contractual protections"]}],"strengths":["The original wording has been preserved for review"],"gaps":["Organisation and scale: add sector or operating context, regions or countries","Solution scope: add required security components, business outcomes or use cases","State the buyer's sector so Netify can apply sector-specific procurement checks","Current estate: add existing WAN or underlay, cloud, SaaS or application estate, identity, security or operational tooling","Resilience and availability: add availability or SLA targets, failover or access diversity, performance requirements","Security, identity and data: add identity and access controls, threat and data controls, logging, compliance or data residency","Operating model and support: add managed, co-managed or self-managed model, support and service management, roles, reporting or governance","Migration and implementation: add deployment or migration approach, timeline, phases or milestones, pilot, cutover, rollback or training","Commercial and contractual: add licensing or contract term, exit, liability or contractual protections","Ask suppliers for dated evidence, certificates, reports or comparable customer references","Define mandatory requirements, scoring or evaluation weightings","Specify a common response and pricing format so bids can be compared"],"recommendedQuestions":[{"id":"Q-IZ-01","category":"Identity / ZTNA","text":"Describe how your platform enforces zero trust access to private applications, including user, group, device posture and application-level controls.","reason":"Closes a gap in Identity / ZTNA."},{"id":"Q-SC-01","category":"SWG / CASB / DLP","text":"Describe your SWG, CASB and DLP capabilities and how they share a single policy engine.","reason":"Closes a gap in SWG / CASB / DLP."},{"id":"Q-FT-01","category":"FWaaS / Threat","text":"Describe your FWaaS, IPS, anti-malware and sandboxing stack and how consistent policy is applied to branch, roaming and cloud egress.","reason":"Closes a gap in FWaaS / Threat."},{"id":"Q-SD-01","category":"SD-WAN Integration","text":"Describe how your SD-WAN integrates with your SSE stack — single vendor, partnered, or third-party — and where the policy boundary sits.","reason":"Closes a gap in SD-WAN Integration."},{"id":"Q-LS-01","category":"Logging / SIEM","text":"Which log types are captured (access, threat, DLP, admin, audit), at what retention, and how can we export them to our SIEM or cold storage?","reason":"Closes a gap in Logging / SIEM."},{"id":"Q-DR-01","category":"Data Residency","text":"Where is customer data, logs and metadata stored and processed, and which regions can we select for our tenant?","reason":"Closes a gap in Data Residency."},{"id":"Q-SM-01","category":"Service Model","text":"Describe your service model — managed, co-managed or self-managed — and the exact split of responsibilities with the customer.","reason":"Closes a gap in Service Model."},{"id":"Q-DP-01","category":"Deployment","text":"Describe a typical deployment plan for an estate of our size, including pilot, phased rollout and steady-state hand-over.","reason":"Closes a gap in Deployment."}],"sector":{"detected":null,"label":null,"gaps":["State the buyer's sector so Netify can apply sector-specific procurement checks"]},"comparabilityWarnings":["Mandatory and desirable requirements are not clearly separated","Suppliers are not given one common response structure","Pricing is not requested in a common one-off, recurring and total-cost structure","Evidence requests do not state how current the evidence must be"],"vendorNeutralityWarnings":[],"bank":{"version":"2026.1","totalQuestions":386,"extendedQuestions":43}}}}