Tenable 1-year 2026-2027

The Maryland Department of Information Technology is soliciting proposals for a one-year Tenable Enterprise vulnerability management contract under its Commercial Off-the-Shelf Software (COTS 2012) master contract program, with proposals due September 14, 2026 at 2:00 p.m. This solicitation is restricted to current master contractors already awarded under COTS 2012 master contract 060B2490021 and requires submission of a Letter of Authorization with each bid.

The scope is a complete end-to-end vulnerability management solution providing comprehensive vulnerability coverage and asset visibility across state organizations. Installation and Training Services (FA II) are available but capped at 49 percent of the total procurement value; core deliverables are COTS Software (FA I). All proposed software must be new, unused, and virus-free. Master contractors must be authorized Tenable resellers and provide a screenshot of the manufacturer's suggested retail price with their bid; pricing must remain valid for at least 90 days following the due date. Contractors must furnish all licensing agreements, EULAs, enterprise license agreements, and acceptable use policies. Estimated ship dates and lead times for all items are required.

Place of performance is 100 Community Place, Crownsville, Maryland 21032. The procurement is fixed-price with no small business reserve designation. Award will be made to the responsive and responsible master contractor providing the most advantageous offer considering price and stated evaluation factors. The state reserves the right to purchase more or less than specified quantities based on available funding. A redacted quote (Q-1696504-1) referenced in the solicitation details product specifications and quantities. Invoices must be directed to doitfiscal.invoiceservice@maryland.gov and comply with COMAR 21.06.09.01 and .02.