Cloudflare

The Maryland Department of Information Technology (DoIT) has issued a Purchase Order Request for Proposals (PORFP) FC-535-25 for Cloudflare's comprehensive DNS management and security solution, specifically targeting Network Maryland and state agencies. The procurement is limited to Master Contractors under the Commercial Off-the-Shelf Software (COTS 2012) contract 060B2490021 and focuses on implementing a centralized, secure DNS management system. The proposed solution includes an All-In Bundle package with Enterprise Service Plan, Application Security Bundle, Bot Management, CDN services, DNS filtering, and Premium Success Support, designed to serve 300 primary domains with 2.1 billion monthly DNS queries. Key objectives include minimizing DNS traffic latency, enhancing internet security, reducing DNS-based attack risks, and improving web application performance. The proposal is due by February 24, 2025, with the place of performance at the Department of Information Technology in Crownsville, MD. Evaluation criteria will primarily focus on price, with the award recommended to a responsive and responsible Master Contractor offering the most advantageous proposal.

The procurement is not designated as a Small Business Reserve opportunity and requires Master Contractors to be authorized Cloudflare resellers who must include MSRP screenshots with their bids. Proposals must be submitted through the eMaryland Marketplace Advantage (eMMA) e-Procurement system. The contract period is set for one year, running from February 15, 2025 to February 14, 2026, with implementation services and professional configuration support included as a one-time cost in the first year. While specific pricing details are not disclosed, the solution includes Premium Success support with 24/7 phone, email, and chat support, along with Enterprise Agreement Onboarding Sessions. The contract covers comprehensive data protection requirements, as outlined in the attached Data Usage Agreement, which mandates strict protocols for handling Personally Identifiable Information (PII) and compliance with Maryland's Protection of Information by Government Agencies (PIGA) provisions. The technological solution will integrate with existing state infrastructure to provide enhanced security and performance improvements across state agency networks.