SW-116835 - USA (New Jersey) - Security Information Event Management Software - Deadline July 23,2026

Vendor needs to provide security information event management software.• The solution shall operate in isolated, self–hosted deployment (non–SaaS), air–gapped environments and allow manual updates for patches, threat intelligence libraries, and vulnerability definitions.• The solution shall support fully container–native architecture supporting deployment of its components as Docker containers using vendor–provided images. • The system must assist with forensic investigations during security incidents, including event timeline reconstruction, identification of compromised accounts or systems, log integrity verification, and export of evidence in standard formats.• The system shall have the ability to consolidate events across multiple sites and is viewable in one console.• The solution shall provide a common taxonomy of events.• The solution shall provide the ability to store and retain the normalized and original raw format of the event log for forensic purposes.• The solution shall provide the ability to customize, for example, to normalize and aggregate event fields that are not represented by the out–of–the–box normalized fields.• The solution shall support the ingestion of unstructured data, i.e., the ingestion of unstructured, schema less data shall be native to the solution without the need for vendor services including but not limited to pdf, docx, txt.• The solution shall support information collected from industry standard vulnerability scanners including but not limited to vulnerability scanning, and vulnerability database updates.