Eclypsium / Smart Compliance Active Firmware Scanning Software

The City of St. Petersburg's Police Department is seeking to procure Eclypsium / Smart Compliance Active Firmware Scanning Software through Invitation for Bid (IFB-25-082) to satisfy CJIS requirement 5.9.2 SI-7 for Software, Firmware, and Information Integrity Control. The procurement targets software coverage for 1,000 endpoint devices (laptops/desktops) with an initial three-year contract term and one optional two-year renewal. Minimum vendor qualifications include being an authorized Eclypsium platform reseller, possessing at least three years of experience providing the platform and support, and the ability to perform the project without subcontractors. The solicitation was published on March 19, 2025, with a deadline for questions on April 1, 2025, and a response deadline of April 15, 2025 at 3:00 pm. The cost proposal must include line items for software, support, hosting, training, and implementation assistance for 1,000 endpoint licenses, with vendors required to complete all cost proposal tables to be considered responsive. The anticipated recommendation of award to City Council is scheduled for June 5, 2025.

The solicitation requires vendors to comply with various legal and regulatory requirements, including E-Verify, nondiscrimination policies, and specific insurance coverage. Vendors must provide $1 million in cyber liability insurance with comprehensive network security and privacy protections, along with commercial general liability and workers' compensation insurance. While no specific set-aside designations for disadvantaged enterprises are mentioned, the procurement appears open to qualified technology vendors meeting the specified requirements. The software solution will integrate with the City of St. Petersburg Police Department's existing technology infrastructure, providing comprehensive firmware scanning and security capabilities for endpoint devices. Though a specific budget range is not explicitly stated, the procurement covers 1,000 endpoint licenses with a full suite of software, support, hosting, training, and implementation services. The solution is specifically designed to provide deep technical visibility into firmware, operating systems, and hardware, enabling the detection of unauthorized modifications and potential security risks in law enforcement technology systems.