Vulnerability Scanning Solution Sources Sought

The Department of State is seeking information from vendors for an enterprise vulnerability scanning solution to assess security posture across domestic and international networks, various cloud environments, and isolated systems. The solution must be able to scan over 250,000 endpoints twice weekly across classified, unclassified and restricted networks worldwide. Vendors must demonstrate experience meeting requirements for centralized management, integration with iPost, Splunk and CyberArk, and providing installation, support and system health check services. Responses to the sources sought notice are due by May 7, 2021 and will be evaluated based on company and technical profiles with relevant past performance.

There is no set-aside designation for this pre-solicitation notice. Responses should address NAICS code 541511 and PSC code D304. While no single incumbent currently performs all tasks, the solution will be deployed by the Department of State's Bureau of Diplomatic Security, Directorate of Cyber and Technology Security, Office of Cyber Monitoring and Operations. Vendors should demonstrate pricing for over one year of support and describe experience delivering similar solutions under contracts ranging from $5-10 million annually.