Vulnerability Scanning Solution RFI

The Department of State Office of Acquisition Management published a Special Notice seeking information on vulnerability scanning solutions. The Notice includes a Request for Information and additional documentation providing further details and questions regarding the Department's requirements.

The Special Notice aims to identify vendors that can provide a solution to discover assets, conduct scheduled and on-demand scans across 180,000 nodes in two geographically separate locations, integrate with various security tools, continuously monitor vulnerabilities and risks, and comply with Department policies. Responses to the RFI are due by May 7, 2021 and must not exceed ten pages, with technical responses describing how the vendor's solution would meet the Department's capabilities for discovering assets, conducting scans across locations including low-bandwidth sites, integrating with cloud and security tools, and providing continuous monitoring, vulnerability assessments, configuration management, and integration with enterprise systems.