Rapid 7 Nexpose & InsightApp Renewal Re-Solicitation

The Maryland Department of Transportation (MDOT) is conducting a procurement for a two-year renewal of Rapid7 cybersecurity software subscriptions through a Commercial Off-the-Shelf (COTS) Software Master Contract. The solicitation covers two primary software components: a Nexpose subscription for 35,000 assets with maintenance and support, and an InsightAppSec subscription for 20 applications. Proposals are due on June 5, 2025, at 2:00 PM, with questions accepted until April 24, 2025, at 5:00 PM through the eMaryland Marketplace Advantage (eMMA) e-Procurement system. The procurement is exclusively limited to master contractors previously awarded under the COTS 2012 contract (060B2490021), specifically for Functional Area III. Vendors must be authorized Rapid7 resellers and are required to provide a screenshot of the Manufacturer's Suggested Retail Price (MSRP) along with all relevant licensing agreements. The contract term spans two consecutive annual periods from August 27, 2025, to August 26, 2027, with identical specifications for both years.

The solicitation does not specify a small business set-aside, indicating that the procurement is open to all qualified vendors meeting the master contractor requirements. Invoicing will be handled electronically to FPMO@MDOT.MARYLAND.GOV, with the first year's invoice due within 30 days of contract start and subsequent annual invoices billed on the anniversary of the first invoice. The total estimated contract value is $485,000, with $242,500 allocated for each contract year. The state reserves the right to adjust quantities based on funding availability, allowing for potential increases or decreases in the software subscription volumes. A comprehensive Data Use Agreement is included, which outlines strict protocols for handling Personally Identifiable Information (PII), requiring vendors to implement robust security measures, limit data access, and promptly report any potential breaches. The contract will be awarded to the vendor who best meets the technical specifications and compliance requirements outlined in the solicitation documents.