MHCC 26-021 (PORFP) Invicti Web Based Vulnerability Software

The Maryland Health Care Commission (MHCC) is issuing a Purchase Order Request for Proposals (PORFP) for the procurement of Invicti Enterprise On-Premise web-based vulnerability scanning software. The solicitation seeks 10 target licenses of the latest version of Invicti Enterprise along with 10 hours of professional services for installation, configuration, and training. License delivery is scheduled for May 15, 2026, with professional services commencing on June 1, 2026, and continuing through May 31, 2027. Proposals must be submitted by May 8, 2026, at 4:00 p.m. ET through the eMaryland Marketplace Advantage (eMMA) e-procurement system, with questions due in writing to Andrea Allen at Andrea.allen@maryland.gov or (410) 764-8791. Evaluation criteria for award include authorized seller status, pricing, and delivery capability, with the contract awarded to the responsive and responsible Master Contractor offering the most advantageous proposal. Bidders must provide Letters of Authorization from the manufacturer or distributor proving authorized reseller status, along with screenshots of the Manufacturer's Suggested Retail Price (MSRP), and pricing proposals must remain valid for at least 90 days following the proposal due date.

This procurement is designated as a Small Business Reserve (SBR) and is restricted exclusively to Master Contractors currently awarded contracts under the Commercial Off-the-Shelf Software (COTS 2012) master contract (060B2490021). All responsive bidders must be certified small businesses meeting Maryland statutory requirements and must be authorized resellers for Invicti products. Invoices shall be submitted to mhcc.invoice@maryland.gov and must comply with Proper Invoice requirements outlined in COMAR 21.06.09.01 and .02, with one-time pricing items billed within 30 days of acceptance and annual pricing items billed on the anniversary of the first invoice. No incumbent vendors or budget ranges are specified in the solicitation materials. The award process will comply with COMAR 21.05.13.06 requirements, and Master Contractors must provide estimated ship dates and lead times with their proposals.