Rapid 7 Nexpose & InsightApp Renewal Re-Solicitation

The state of Maryland is seeking a renewal for Rapid7 Nexpose and InsightApp software licenses through a re-solicitation process scheduled for fiscal year 2026. The procurement involves renewing a one-year subscription for 35,000 Nexpose assets, which includes maintenance and support, and an InsightAppSec subscription for 20 applications, both manufactured by Rapid7. The contract opportunity was posted on August 27, 2025, with proposals due by September 10, 2025. The primary objective appears to be maintaining continuous cybersecurity software licensing and support for the state's digital infrastructure. A Data Use Agreement (DUA) accompanies the solicitation, which comprehensively outlines protocols for handling Personally Identifiable Information (PII), including mandatory security measures, personnel training requirements, encryption standards, and breach notification procedures.

While specific set-aside designations are not explicitly detailed in the provided documentation, the contract includes strict data protection provisions governed by Maryland state law and the Protection of Information by Government Agencies (PIGA) regulations. The agreement requires processors to implement robust security protocols, limit PII usage to authorized purposes, and maintain strict confidentiality. The vendor must be capable of providing comprehensive software licensing, maintenance, and support for cybersecurity applications, with specific technical capabilities for managing asset and application subscriptions. Although exact budget ranges are not specified, the scale of the procurement (35,000 asset licenses and 20 application subscriptions) suggests a significant investment in cybersecurity infrastructure. The accompanying Data Use Agreement indicates a sophisticated approach to vendor selection, emphasizing data security, compliance, and rigorous information management standards.