NOFO 2025-Cyber-01 for Cyber Resilient Massachusetts

The Massachusetts Technology Collaborative (MassTech) and MassCyberCenter are issuing a Notice of Funding Opportunity (NOFO 2025-Cyber-01) for the Cyber Resilient Massachusetts Grant Program, seeking to provide cybersecurity funding to municipalities, small businesses, and non-profits. The procurement focuses on two primary initiatives: Managed Detection and Response (MDR) services and narrowly focused technology upgrades based on cybersecurity vulnerability assessments. Eligible applicants can receive grants up to $25,000, with municipalities able to apply for both MDR services and technology upgrades, while small businesses and non-profits can only request MDR funding. The technology upgrade projects require applicants to submit detailed vulnerability assessments from qualified providers, and grantees will be obligated to report quarterly on metrics including vulnerabilities closed and project expenses. The application process is rolling for MDR projects and quarterly for technology upgrades, with the next technology upgrade deadline set for 3/31/25. Applicants must provide comprehensive organizational information, project scopes, and detailed implementation plans. MDR services will be delivered through CyberTrust Massachusetts, which operates a Security Operations Center (SOC) with support from SentinelOne, offering 24/7 endpoint monitoring, network discovery, and vulnerability management.

The grant program prioritizes Massachusetts-based small businesses and non-profits, with a specific focus on technology sectors including Artificial Intelligence, BlueTech, ClimateTech, Defense & Aerospace, and FinTech. Funding mechanisms differ by applicant type: municipalities will receive forward-funded grants, while small businesses and non-profits will be reimbursed after expenses. The program has specific restrictions on grant usage, mandating that funds be used exclusively for MDR services or technology upgrades identified through formal vulnerability assessments. Potential restrictions and evaluation preferences appear to favor local Massachusetts entities, particularly those in emerging technology sectors. While specific budget ranges are not exhaustively detailed, individual grants are capped at $25,000, suggesting a total program budget in the mid-six-figure range. The grant opportunity includes comprehensive documentation requirements, including a detailed budget template that tracks expenses across four invoice periods and requires precise financial reporting. Respondents must complete Attachment A, which includes compliance certifications, and all bid responses will remain valid for 60 days from receipt by Mass Tech Collaborative.