Vulnerability Management Platform

The University of Waterloo is seeking a comprehensive Vulnerability Management Platform through solicitation number 2026-00477 - LG, with proposals due by June 10, 2026. The solution must support the detection of vulnerabilities and the collection of asset information across approximately 25,000 on-premises IP assets using unauthenticated scanning, while also integrating with 10,000 installed agents for enhanced visibility, accounting for overlap between agent-deployed and scanned assets. The platform must be delivered as a SaaS solution and meet all technical and operational requirements outlined in the RFP, ensuring robust, scalable, and continuous vulnerability identification and remediation support. Bidders must submit proposals through the Merx platform, where fees may apply, and access to RFP documentation is available on the Euna Procurement portal. The procurement is open to qualified vendors with no specific set-aside criteria, and all responses must align with the technical specifications and performance expectations defined by the university. The primary point of contact for inquiries is Reception Services at procures@uwaterloo.ca or 519-888-4501, with the solicitation categorized under NAICS code 518210. While the organization listed is the University of Waterloo, the system categorizes the agency as Government of Canada, and the tender is publicly accessible via Canada Buys. Interested vendors are required to review all documentation on Merx and the Euna portal prior to submission, ensuring full compliance with procedural, technical, and contractual obligations.