NIGP 20889: Threat Alert Software

NIGP 20889 Threat Alert Software is an Item code that encompasses intrusion prevention system support, firmware scanning software, AI-powered threat detection platforms, and related cybersecurity monitoring and analytics tools that state and local governments currently procure to protect network infrastructure, endpoint devices, and digital assets. Recent solicitations show state and local agencies buying specialized threat-detection appliances with machine learning capabilities, managed security services, software licensing tied to specific endpoint or network counts, and integration with existing security information and event management platforms. The work spans Intrusion Prevention System maintenance contracts with managed security features, AI and machine learning-driven threat detection covering email systems and IoT devices, active firmware scanning for law enforcement endpoint compliance, and real-time analytics platforms for multi-threat-actor detection across complex network ecosystems. Issuing bodies include county governments and municipal transit authorities, with repeat activity from Florida jurisdictions; Broward County has solicited twice recently under this code for Trend Micro TippingPoint support and related threat-detection services. Geographic activity concentrates in Florida and the broader Southeast, with additional recent procurement in Texas and Georgia.

Representative recent opportunities include Broward County's October 23, 2026 RFP (solicitation TCH2132898B1) for Trend Micro TippingPoint Intrusion Prevention System support services spanning appliance licenses, maintenance, annual subscriptions, and managed threat intelligence, with local business enterprise and small business enterprise preferences available; Hillsborough County's sole-source procurement (SS2600405, due September 11, 2026) for Earth Networks lightning detection and severe weather monitoring hardware, software, and maintenance at an estimated value of $47,627.54 over two years; the City of St. Petersburg Police Department's August 2026 Invitation for Bid for Eclypsium firmware scanning software covering 1,000 endpoint devices with a three-year initial term and optional two-year renewal; and the Jacksonville Transportation Authority's sole-source solicitation (SS-24-010) for Darktrace AI and machine learning software to detect advanced threats across external networks, internal systems, cloud environments, IoT devices, and transportation-oriented infrastructure with real-time incident reporting and human-reviewed threat intelligence services.