Tenable 2025-2026

The Maryland Department of Information Technology (DoIT) is conducting a Purchase Order Request for Proposals (PORFP) numbered FC-271-26 for Tenable cybersecurity software and support services, specifically targeting vulnerability management solutions. The procurement is being executed under the Commercial Off-the-Shelf Software 2012 (COTS 2012) master contract and is limited to current Master Contractors under contract 060B2490021. The solicitation seeks comprehensive cybersecurity products including Tenable Vulnerability Management, Security Center Agents, Web App Scanning, Tenable One, Elite Support, and a Technical Account Manager, with coverage for 61,200 and 41,800 assets across various IP ranges. The proposal solicitation was issued on 08/22/2025, with proposals due on 09/03/2025 at 2:00 pm, and requires bidders to submit a Letter of Authorization (LOA) with their proposal. Evaluation criteria will primarily focus on price, with the agency recommending award to the most advantageous offer from a responsive and responsible Master Contractor, and pricing is required to remain valid for 90 days after the proposal due date.

The procurement does not have a small business reserve (SBR) designation, indicating open competition among qualified vendors. The contract will cover a 12-month term from 9/30/2025 to 9/29/2026, with potential options for installation, training services, and manufacturer's software maintenance. Invoices will be electronically submitted to doitfiscal.invoiceservice@maryland.gov, with the performance location set at 100 Community Place, Crownsville, MD 21032. While specific budget ranges are not explicitly detailed, the attached documentation shows zero-dollar pricing across line items, suggesting this may be a negotiated or pre-approved contract renewal. The end customer contact is Heath Belin from Maryland DoIT, and the solicitation is managed by Procurement Officer Merchelle Halsey. Vendors must comply with COMAR 21.05.13.06 procurement regulations and be prepared to provide comprehensive cybersecurity software and support services tailored to the state's specific vulnerability management needs.