RFQ Q50724 Rapid7 Subscription Renewal

The Metropolitan Atlanta Rapid Transit Authority (MARTA) is seeking quotes from qualified firms to renew and support its Rapid7 Vulnerability Management solution, a critical cybersecurity platform used for asset-based risk detection, credentialed scanning, and remediation prioritization. The contract involves deploying, configuring, and providing ongoing support for the Rapid7 InsightVM system, including installation of virtual appliances, integration with MARTA’s Active Directory, cloud assets, and ticketing systems, as well as developing dashboards for security and IT teams. The scope emphasizes thorough testing, validation, and documentation to ensure the system's performance aligns with MARTA’s cybersecurity standards, including compliance with NIST, PCI DSS, and other industry best practices. The contract is structured as a one-year subscription, with an estimated value ranging from $50,000 to $200,000, and requires adherence to strict confidentiality, data protection, and cybersecurity insurance requirements, including comprehensive coverage for general liability, auto, cyber, and professional liability insurance. The procurement process involves submitting detailed quotations by June 18, 2025, with evaluations based on responsiveness, responsibility, and technical and financial qualifications. MARTA reserves the right to award to multiple vendors or select a single provider, and emphasizes the importance of diversity and inclusion, encouraging participation from small business enterprises, although the set goal for SBE participation is zero. Respondents must provide extensive certifications, affidavits verifying compliance with Georgia’s illegal immigration laws, conflict of interest declarations, and detailed business and project experience. The contract emphasizes strict adherence to federal and state regulations, including E-Verify registration, and mandates that all subcontractors also comply with these requirements. Overall, the contract aims to ensure a secure, compliant, and efficiently managed vulnerability management system that supports MARTA’s cybersecurity posture and operational needs.