MHCC_26-021_PORFP_Invicti_Web_Based_Vulnerability_Software.pdf

Purchase Order Request for Proposals (PORFP) COTS Software Master Contract

Revised 051623 1

Section 1 –General Information

PORFP Number:

(eMMA BPM Number)

MHCC 26-021

PORFP Type:

(Select one category from the drop-down list)

Fixed Price

Functional Area/s (FA) for this PORFP:

FA I – COTS Software FA II – Installation and Training Services FA III – Manufacturer's Software Maintenance

Note: FA II may not be purchased alone and may not exceed 49% of the PORFP value.

Manufacturer Name

Invicti

Designated Small Business Reserve?(SBR):

Yes

This is a Small Business Reserve Procurement for which the award will be limited to certified small business vendors. Only businesses that meet the statutory requirements set forth in State Finance and Procurement Article, §§14-501—14-505, Annotated Code of Maryland, and that are certified by GOSBA Small Business Reserve Program are eligible for the award of a contract.

Information on eligibility for the SBR program is available on the following website:

https://gomdsmallbiz.maryland.gov/Pages/sbr-program.aspx

Information on the SBR Vendor Registration processes is available on the following website:

https://gomdsmallbiz.maryland.gov/Pages/SBR- Registration.aspx

PORFP Issue Date:

mm/dd/yyyy

04/22/2026 PROPOSAL DUE

DATE AND TIME:

05/08/2026, no later than 4 pm

ET

Place of Performance: N/A

Special Instructions:

LIMITED TO MASTER CONTRACTORS

Only Master Contractors that are awarded a contract under the Commercial Off-the-Shelf Software (COTS 2012), 060B2490021, are eligible to submit a bid in response to this secondary competition Purchase Order Request for Proposal (PORFP). A current Master Contractor under the named contract may submit an LOA with their Bid to be considered for the award.

Revised 051623 2

BID SUBMISSION INSTRUCTIONS

Purchase Order Request for Proposal (PORFP) responses will only be accepted through the State's eMaryland Marketplace Advantage (eMMA) e-Procurement system.

Instructions on how to submit proposals electronically can be found at Vendor Instruction:

https://mdprocurement.freshdesk.com/support/solutions

QUESTIONS DUE (CLOSING) DATE AND TIME:

Questions must be submitted in writing with the subject line, "Question for PORFP # MHCC 26-021," and be submitted in writing via e-mail to the Agency Point of Contact listed in Section 2 no later than the date and time specified.

SPECIAL REQUIREMENTS

1. The Department reserves the right to purchase more or less than the specified quantity to the extent limited by funding.

Charges that are multiple years shall be provided at a per-year price.

2. Purchase new and unused equipment.

3. The Master Contractor shall not impose a restocking fee if an item is returned due to damage or incorrect product shipped.

4. The Master Contractor must provide the estimated ship date/lead time for each item listed in the PORFP.

5. Please allow for pricing provided in response to this PORFP to be valid for at least 90 days after the set due date above.

6. The Master Contractor must be an authorized reseller for the Manufacturer named in Section 1. The state reserves the right to request a Letter of Authorization (LOA) from the Manufacturer or Distributor.

7. The Master Contractor must include a screenshot of the Manufacturer's Suggested Retail Price (MSRP) with the Bid.

8. Bids must be received by the due date and time listed in the solicitation. Bids that are not received by the due date and time will not be accepted.

9. A "No Bid" form must be completed and submitted by the Bid due date and time if your firm elects not to bid.

Security Requirements (if applicable):

N/A

Invoicing Instructions:

Invoices shall be submitted to mhcc.invoice@maryland.gov.

https://mdprocurement.freshdesk.com/support/solutions

Revised 051623 3

An invoice not satisfying the requirements of a Proper Invoice (as defined at COMAR 21.06.09.01 and .02) cannot be processed for payment. To be considered a Proper Invoice, invoices must include the following information without error:

1) Contractor name and address;

2) Remittance address;

3) Federal taxpayer identification (FEIN) number, social security number, as appropriate;

4) Invoice period (i.e., the time period during which services covered by invoice were performed);

5) Invoice date;

6) Invoice number;

7) State-assigned Contract number;

8) State-assigned (Blanket) Purchase Order number(s);

9) Goods or services provided;

10) Amount due; and

11) Any additional documentation required by regulation or the Contract.

For items of work for which there is one-time pricing, those items shall be billed within 30 days of acceptance.

For items of work for which there is annual pricing, items shall be billed annually. The first year's invoice shall be billed within 30 days of contract start. Each additional year shall be billed on the anniversary of the first year's invoice.

Section 2 – Agency Point of Contact (POC) Information

Agency / Division Name:

Maryland Health Care Commission

Agency POC Name: Andrea Allen Agency POC Phone Number:

(410) 764-8791

Agency POC E-mail Address:

Andrea.allen@maryland.gov

Agency POC Mailing Address:

4160 Patterson Avenue, Baltimore, Maryland 21215

Section 3 – Delivery Address / Work Site POC Information (if different from above)

Agency On-site Contact Name:

Levone Ward Agency On-site Phone Number:

(410)259-0230

Agency On-site E-mail Address:

Levone.Ward@maryland.

gov

Agency On-site Fax:

Agency On-site Address:

4160 Patterson Avenue, Baltimore, Maryland 21215

Section 4 – Scope of Work

Revised 051623 4

FA I – COTS Software (Provide product specifications below. If some or all specifications are unknown, Master Contractors may propose products based on a detailed description in the

Business Need / Required Functionality field*) *Business Need / Required Functionality

The Maryland Health Care Commission has several web-based applications required to collect important information from external stakeholders and reporting agencies. To operate these applications in a safe cyber environment, MHCC seeks to acquire an application to scan web-based applications for vulnerabilities.

Product Name

Product

Description

Version

Release

Quantity of

Licenses

Due Date mm/dd/yy yy

1. Invicti Enterprise On Premise Renewal

Cloud-Based Work Management Solution

Enterpri se (Latest Version)

N/A 10 Targets 5/15/2026

2.

3.

(insert additional rows as needed)

FA II – Installation and Training Services (Provide a detailed description of required services and deliverables)

Installation / Training Services

Deliverables Start Date

End Date mm/dd/yyyy

1. Professional Services 10 Hours of Professional Services- Quantity 10 of professional services hours for installation, configuration, and training valid for the term of the subscription

Digital Confirmation for Hours Availability

06/1/2026

Concurrent with the licensing term

05/31/2027

Concurrent with the licensing term

FA III - Manufacturer's Software Warranty / Maintenance (Provide a detailed description of warranty / maintenance requirements and deliverables)

Warranty / Maintenance

Requirements

Deliverables

Start Date

End Date

Section 5 – Evaluation Criteria

1. Authorized Seller

2. Price

3. Delivery

Revised 051623 5

Basis for Award Recommendation The agency Point of Contact listed in Section 2 will recommend the award to a responsive and responsible Master Contractor that provides the most advantageous offer considering the price and evaluation factors above. The agency Point of Contact will initiate and deliver a PO to the selected Master Contractor.

All awards from this PORFP shall comply with the requirements of COMAR 21.05.13.06.

NO BID NOTICE/VENDOR FEEDBACK FORM

To help us improve the quality of State solicitations and to make our procurement process more responsive and business-friendly, please provide comments and suggestions regarding this solicitation. Please return your comments with your response. If you have chosen not to respond to this solicitation, please e-mail or fax this completed form to the attention of the Agency Point of Contact listed in Section 2.

Title: Commercial Off-the-Shelf Software 2012 (COTS 2012) Solicitation No: 060B2490021

PORFP: MHCC 24-046

1. If you have chosen not to respond to this solicitation, please indicate the reason(s) below:

� Other commitments preclude our participation at this time.

� The subject of the solicitation is not something we ordinarily provide.

� We are inexperienced in the work/commodities required.

� Specifications are unclear, too restrictive, etc. (Explain in REMARKS section)

� The scope of work is beyond our present capacity.

� Doing business with the State is simply too complicated. (Explain in REMARKS section)

� We cannot be competitive. (Explain in REMARKS section)

� The time allotted for the completion of the Bid is insufficient.

� Prior State of Maryland contract experience was unprofitable or otherwise unsatisfactory. (Explain in REMARKS section)

� Other: _________________________________________________________

2. If you have submitted a response to this solicitation, but wish to offer suggestions or express concerns, please use the REMARKS section below.

REMARKS: _________________________________________________________________

Offeror Name: ________________________________ Date: _______________________

Contact Person: _________________________________ Phone (____) _____ - ________

Address: _________________________________________________________________

E-mail Address:____________________________________________________________