RFQ-26-03407 for Tenable Enterprise Platform

The Massachusetts Executive Office of Technology Services and Security (EOTSS) is issuing a Request for Quotation to procure the Tenable Enterprise Platform, aiming to renew existing licenses and establish a Master Service Agreement for the upcoming fiscal year. The procurement seeks a comprehensive suite of vulnerability management solutions, including both on-premises and cloud-based software, such as Tenable.vm, Web Application Scanning, Tenable Security Center Plus, Tenable Lumin, and related services like setup, implementation, support, maintenance, and training. The contract is anticipated to cover a period from July 1, 2025, through June 30, 2026, with an estimated value ranging from $500,000 to $2,000,000, and flexible tiered pricing to accommodate asset count fluctuations. Bidders must be current ITS60 or ITS75 Category 1 or 2 vendors and respond through the Commonwealth’s online procurement system, COMMBUYS, by June 4, 2025. Evaluation of responses will prioritize the fit to requirements, product functionality quality, delivery timelines, and price, with a preference for small businesses if the annual spend is under $250,000. The procurement emphasizes compliance with state and federal standards, including enterprise security, accessibility, and Web Content Accessibility Guidelines (Section 508, WCAG2 AA). Bidders are required to provide detailed responses via specified forms, including references, data security practices, and licensing agreements, and must adhere to extensive contractual provisions covering software licensing, disaster recovery, intellectual property rights, and cybersecurity. Notably, the contract incorporates strict guidelines on the use of Generative AI, requiring transparency, ownership rights, bias mitigation, and security controls, with prohibitions on data transfer outside approved cloud environments and reverse engineering. The resulting Master Service Agreement will facilitate future procurements across other state agencies, subject to prior approval, and will include provisions for audits, warranties, and compliance with Commonwealth policies. All communications and submissions are to be managed through COMMBUYS, with bidders encouraged to review guidance materials and participate in Q&A sessions to ensure full compliance and competitiveness.