Managed Vulnerability Management Services

The Michigan-based government authority is seeking a vendor to provide fully managed vulnerability management services. This initiative aims to establish continuous visibility, prioritization, tracking, and reporting of cybersecurity vulnerabilities across the agency's entire IT environment. The agency requires a solution that delivers risk-based prioritization of vulnerabilities and lifecycle remediation tracking through final closure. The scope of work covers fully managed internal and external vulnerability scanning, continuous vulnerability identification, and contextual risk scoring. The selected partner must perform asset discovery to identify unmanaged systems and conduct ongoing tuning to optimize scanning coverage. Additionally, the agency requires executive, technical, and operational reporting, alongside monthly analyst-led review meetings to validate remediation efforts. Eligible bidders must be onshore organizations based exclusively in the United States. The agency will allow the work to be performed through a combination of onsite and offsite delivery. Bidders must submit their proposals digitally either via email or through the designated online portal, and the agency is currently open to receiving budget proposals to determine the cost of these services.