SW-121305 - USA (Colorado) - Managed Detect and Respond Services and Software - Deadline November 18,2026

(1) Vendor needs to provide managed detect and respond services and software. – Provide Managed Detect and Response (MDR) services and software that go beyond traditional antivirus. • Provide Managed Detect and Respond (MDR) services and software for 24/7 monitoring and incident response of cyber security incidents identified on endpoints.• The solution must provide Endpoint Detection and Response (EDR) Software: Deployment of next generation antimalware agent software across all agency–owned devices (workstations, servers, domain controllers and cloud workloads) supporting major operating systems (Windows, MacOS, Linux).• Solution must include a 24/7 monitoring of the Endpoint Detect and Respond (EDR) console to provide immediate authorized actions and escalations to agency staff to contain, isolate, and eradicate malicious endpoint activity.• Real–time telemetry and visibility: Provide agency IT staff access to the EDR console and include external logging to the agency’s Security Information and Event Manager (SIEM) in an open log format.• Detection and visibility:– 24/7/365 Security Operations Center (SOC)– Continuous monitoring– Behavioral analysis– Threat intelligence• Core investigation and threat hunting:– Centralized telemetry: Provide a centralized, searchable database of all endpoint telemetry for historical lookback for a minimum of 90 days– Querying language: Offer a powerful, flexible querying language for security analysts to perform proactive threat hunting.– Visualizations: Provide a visual representation of the attack chain (process trees) to aid in understanding the scope and timeline of an incident.• Deployment model: Identify the SaaS/Cloud–Native environment the EDR console will be using including the hosting provider. • Agent deployment.• Geographical data residency: SaaS/Cloud–Native solutions must be stored within the continental United States.(2) All the questions must be submitted no later than November 6, 2026. (3) The contract period will be for one year.