Threat Intelligence Services

Location:	Vermont
Posted:	Dec 24, 2025
Due:	Jan 9, 2026
Agency:	State of Vermont
Type of Government:	State & Local
Category:	A - Research and development D - Automatic Data Processing and Telecommunication Services R - Professional, Administrative and Management Support Services
Publication URL:	To access bid details, please log in.

Attachment Preview

Agency of Digital Services

Vermont Agency of Digital Services

One National Life Drive, Dewey Building

Montpelier, VT 05620

802-828-4141

http://bgs.vermont.gov/purchasing

SEALED BID

REQUEST FOR PROPOSAL

Threat Intelligence Services

ISSUE DATE

QUESTIONS DUE

RFP RESPONSES DUE BY

November 26, 2025

December 5, 2025 – 4:30 PM (ET)

December 22, 2025 – 4:30 PM (ET)

PLEASE BE ADVISED THAT ALL NOTIFICATIONS, RELEASES, AND ADDENDUMS

ASSOCIATED WITH THIS RFP WILL BE POSTED AT:

http://www.bgs.state.vt.us/pca/bids/bids.php

THE STATE WILL MAKE NO ATTEMPT TO CONTACT INTERESTED PARTIES WITH

UPDATED INFORMATION. IT IS THE RESPONSIBILITY OF EACH BIDDER TO

PERIODICALLY CHECK THE ABOVE WEBPAGEFOR ANY AND ALL NOTIFICATIONS,

RELEASES AND ADDENDUMS ASSOCIATED WITH THIS RFP.

STATE CONTACT:

E-MAIL:

USE SUBJECT:

Kyle Emerson, State Purchasing Agent

sov.thepathforward@vermont.gov

THREAT INTELLIGENCE SERVICES

1. OVERVIEW:

1.1. SCOPE AND BACKGROUND:

Through this Request for Proposal (RFP) the Agency of Digital Services, Security Division (hereinafter the

“State”) is seeking to establish contracts with one or more companies that can provide Threat Intelligence.

1.2. CONTRACT PERIOD:

Any Contract(s) arising from this RFP will be for a period of one year with an option to renew for up to two

additional twelve-month periods. The State anticipates the start date for such contract(s) to be January 1,

2026.

1.3. SINGLE POINT OF CONTACT:

All communications concerning this RFP are to be addressed in writing to the State Contact listed on the

front page of this RFP. Actual or attempted contact with any other individual from the State concerning this

RFP is strictly prohibited and may result in disqualification.

1.4. QUESTION AND ANSWER PERIOD:

Any bidder requiring clarification of any section of this RFP or wishing to comment on any requirement of

the RFP must submit specific questions in writing no later than the deadline for question indicated on the

first page of this RFP. Questions may be e-mailed to the point of contact on the front page of this RFP.

Questions or comments not raised in writing on or before the last day of the question period are thereafter

waived. At the close of the question period a copy of all questions or comments and the State's responses

will be posted on the State’s web site http://www.bgs.state.vt.us/pca/bids/bids.php . Every effort will be

made to post this information as soon as possible after the question period ends, contingent on the number

and complexity of the questions. All information provided by vendors during this process will be public and

bidders shall not provide confidential information, except as described in 4.1 below.

1.5. CHANGES TO THIS RFP:

Any modifications to this RFP will be made in writing by the State through the issuance of an Addendum to

this RFP and posted online at http://www.bgs.state.vt.us/pca/bids/bids.php . Modifications from any other

source are not to be considered.

2. DETAILED REQUIREMENTS/DESIRED OUTCOMES:

2.1. BUSINESS NEEDS

The State of Vermont is interested in obtaining bids to meet the following business need(s):

• Dark Web Searches and Monitoring and reputational monitoring:

o Capability of scanning the dark web for any mentions or threats related to an organization, helping

to protect its reputation and security.

• Named Executive/VIP monitoring:

o Tracks potential threats or risks specifically targeting high-profile individuals within an organization.

• Credential Searches:

o Searching for compromised credentials to prevent unauthorized access to systems and

automatically ingesting them into existing SIEM architecture.

• Focused on our Infrastructure:

o Information Security measures that are focused on monitoring State of Vermont IT infrastructure.

• Subject Matter Experts from Intel Community:

o Access to subject matter experts with the capability to appropriately handle sensitive information

for dissemination to the State of Vermont as a customer base.

• 5 seat, with cost breakout for additional seats above starting package:

o Outlines the pricing structure based on the number of user licenses, with details on costs for

additional licenses.

• If 1 flat fee - detailed breakout:

o A comprehensive breakdown of services included in a single, all-inclusive pricing model.

• API or other mechanisms for Splunk and/or Tanium:

o Existing capability for tools or interfaces to connect with Splunk and Tanium platforms.

• What other gov entities (SLTT specific if possible) use their service:

o Information on other government entities, particularly state, local, tribal, and territorial (SLTT)

agencies, that utilize the service.

• Intel on threat actors that may be targeting us:

o Tailored intelligence focused on Vermont specific assets, vulnerabilities, and current threat actor

trends in the wild.

 Attribution capability against noted threats in environmental trends specific to the State of

Vermont.

• Case Management Features:

o Please list any of the platform features.

• Domain takedowns:

o Existing capability for utilizing DMCA takedown notices and crafting messages to facilitate

takedowns of copycat domains.

• Integrations with Splunk, Tanium, Defender for Endpoint:

o Existing capability to connect and work seamlessly with these specific security platforms.

• Deception strategies:

o Existing capability to deploy decoy systems to attract and analyze cyber attackers.

• Onboarding process description:

o Detailed explanation of onboarding the State of Vermont and maturing services.

• Number of RFIs included in contract, and financial cost for additional RFIs: This specifies the number of

Finished Intelligence Reports included in the contract and the cost for any additional reports.

o Receiving security advice derived from sensitive or confidential data.

2.2. BUSINESS VALUE

The State of Vermont seeks to achieve the following Business Value(s):

2.2.1.COST SAVINGS:

Prevention of fraud, financial loss, and reduced insurance premiums over time.

2.2.2.CUSTOMER SERVICE IMPROVEMENT:

Enhanced customer trust through the proactive protections against constituent data.

2.2.3.RISK REDUCTION:

Proactive threat identification from proper threat intelligence significantly reduces the active risks in

environments.

2.2.4. COMPLIANCE:

Reduced findings during audits through proactive measures.

2.3. FUNCTIONAL AND NON-FUNCTIONAL REQUIREMENTS

2.3.1.REQUIREMENTS ATTACHED

The State’s Functional and Non-Functional Requirements are provided in the attached State of Vermont

Bidder Response Form (Exhibit C).

2.3.2.THE NON-FUNCTIONAL REQUIREMENTS INCLUDE REQUIREMENTS FOR THE FOLLOWING:

2.3.2.1. Hosting

2.3.2.2. Application Solution

2.3.2.3. Security

2.3.2.4. Data Compliance: Solutions must adhere to applicable State and Federal

standards, policies, and laws. The Bidder Response Form includes a table of data

types and their applicable State and Federal standards, policies, and laws. The

boxes in the table that are checked are the ones that are applicable to this

procurement

3. GENERAL REQUIREMENTS:

3.1. PRICING:

Bidders must price the terms of this solicitation at their best pricing. Any and all costs that Bidder wishes

the State to consider must be submitted for consideration. If applicable, all equipment pricing is to include

F.O.B. delivery to the ordering facility. No request for extra delivery cost will be honored. All equipment

shall be delivered assembled, serviced, and ready for immediate use, unless otherwise requested by the

State.

3.1.1.PRICES AND/OR RATES

Prices and/or rates shall remain firm for the initial term of the contract. The pricing policy submitted by

Bidder must (i) be clearly structured, accountable, and auditable and (ii) cover the full spectrum of materials

and/or services required.

3.1.2.COOPERATIVE AGREEMENTS.

Bidders that have been awarded similar contracts through a competitive bidding process with another state

and/or cooperative are welcome to submit the pricing in response to this solicitation.

3.2. STATEMENT OF RIGHTS:

The State shall have the authority to evaluate Responses and select the Bidder(s) as may be determined to

be in the best interest of the State and consistent with the goals and performance requirements outlined in

this RFP. The State of Vermont reserves the right to obtain clarification or additional information necessary

to properly evaluate a proposal. Failure of bidder to respond to a request for additional information or

clarification could result in rejection of that bidder's proposal. To secure a project that is deemed to be in

the best interest of the State, the State reserves the right to accept or reject any and all bids, in whole or in

part, with or without cause, and to waive technicalities in submissions. The State also reserves the right to

make purchases outside of the awarded contracts where it is deemed in the best interest of the State.

3.2.1.BEST AND FINAL OFFER (BAFO).

At any time after submission of Responses and prior to the final selection of Bidder(s) for Contract

negotiation or execution, the State may invite Bidder(s) to provide a BAFO. The state reserves the right to

request BAFOs from only those Bidders that meet the minimum qualification requirements and/or have not

been eliminated from consideration during the evaluation process.

3.2.2. PRESENTATION.

An in-person or webinar presentation by the Bidder may be required by the State if it will help the State’s

evaluation process. The State will factor information presented during presentations into the evaluation.

Bidders will be responsible for all costs associated with providing the presentation.

3.3. CONFLICTS OF INTEREST:

3.3.1.ORGANIZATIONAL CONFLICT OF INTEREST (OCOI):

An OCOI arises when a bidder as a business entity has interests (for example, customers, partners,

contracts) that could undermine, or reasonably be perceived to undermine, its faithful and unbiased

performance of a contract with the State that may result from this solicitation.

3.3.2.PERSONAL CONFLICT OF INTEREST (PCOI):

A PCOI arises when an interest held by an individual, agent or employee of a bidder could undermine, or

reasonably be perceived to undermine, its faithful and unbiased performance of a contract with the State

that may result from this solicitation.

3.3.3. REQUIREMENTS:

The State does not seek to contract with any individual or business entity having a conflict of interest which

cannot be mitigated to the State’s satisfaction. To ensure the State’s awareness of actual, potential, or

reasonably perceived PCOIs and OCOIs, bidders shall:

a) Prior to submitting a proposal, conduct an internal review of its current affiliations and activities and

identify actual, potential, or reasonably perceived PCOIs or OCOIs relative to a contract with the

State that may result from this solicitation.

b) Disclose in your proposal any actual or potential PCOI or OCOI or the existence of any facts that

may cause a reasonably prudent person to perceive a PCOI or OCOI with respect to a contract

with the State that may result from this solicitation. Disclose, also, any actions proposed to mitigate

the PCOI or OCOI.

3.3.4.The state shall have sole discretion to determine whether a PCOI or OCOI can be mitigated to the

State’s satisfaction and may discuss the conflict with the bidder if and to the extent the State deems

discussion necessary to its determination. The State reserves the right to (a) reject from further

consideration any proposal having a PCOI or OCOI that cannot be mitigated to the State’s full

satisfaction and (b) terminate a contract upon discovery that a contractor failed to disclose facts

pertaining to a PCOI or OCOI in its proposal, or otherwise misrepresented relevant information to the

state.

3.4. WORKER CLASSIFICATION COMPLIANCE REQUIREMENTS:

In accordance with Section 32 of The Vermont Recovery and Reinvestment Act of 2009 (Act No. 54),

Bidders must comply with the following provisions and requirements.

3.4.1.SELF REPORTING:

For bid amounts exceeding $250,000.00, Bidder shall complete the appropriate section in the attached

Certificate of Compliance for purposes of self-reporting information relating to past violations, convictions,

suspensions, and any other information related to past performance relative to coding and classification of

workers. The State is requiring information on any violations that occurred in the previous 12 months.

3.4.2.SUBCONTRACTOR REPORTING:

For bid amounts exceeding $250,000.00, Bidders are hereby notified that upon award of contract, and prior

to contract execution, the State shall be provided with a list of all proposed subcontractors and

subcontractors’ subcontractors, together with the identity of those subcontractors’ workers compensation

insurance providers, and additional required or requested information, as applicable, in accordance with

Section 32 of The Vermont Recovery and Reinvestment Act of 2009 (Act No. 54). This requirement does

not apply to subcontractors providing supplies only and no labor to the overall contract or project. This list

MUST be updated and provided to the State as additional subcontractors are hired. A sample form is

available online at http://bgs.vermont.gov/purchasing-contracting/forms. The subcontractor reporting

form is not required to be submitted with the bid response.

3.5. EXECUTIVE ORDER 05-16: CLIMATE CHANGE CONSIDERATIONS IN STATE PROCUREMENTS:

For bid amounts exceeding $25,000.00 Bidders are requested to complete the Climate Change

Considerations in State Procurements Certification, which is included in the Certificate of Compliance for this

RFP.

After consideration of all relevant factors, a bidder that demonstrates business practices that promote clean

energy and address climate change as identified in the Certification, shall be given favorable consideration

in the competitive bidding process. Such favorable consideration shall be consistent with and not

supersede any preference given to resident bidders of the State and/or products raised or manufactured in

the State, as explained in the Method of Award section. But, such favorable consideration shall not be

employed if prohibited by law or other relevant authority or agreement.

3.6. METHOD OF AWARD:

Awards will be made in the best interest of the State. The State may award one or more contracts and

reserves the right to make additional awards to other compliant bidders at any time if such award is

deemed to be in the best interest of the State. All other considerations being equal, preference will be

given first to resident bidders of the state and/or to products raised or manufactured in the state, and then

to bidders who have practices that promote clean energy and address climate change, as identified in the

applicable Certificate of Compliance.

3.6.1.EVALUATION CRITERIA:

Consideration shall be given to the Bidder’s project approach and methodology, qualifications and

experience, ability to provide the services within the defined timeline, cost, and/or success in completing

similar projects, as applicable, and to the extent specified below. Finalists will be chosen to perform Demos

of their products to the evaluating team.

Criteria

Vendor Profile: Experience, Financial Strength, References from the SLTT community

Weight Factor

This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.

TITLE	QUESTIONS DUE	ANSWERS POSTED	DUE DATE	NO POSTING AFTER
Threat Intelligence Services Bidder Response Form Addendum 1 Addendum 2	12/05/2025 04:30PM	Questions and Answers - Threat Intelligence Services FINAL (12/24/2025)	01/09/2026 04:30PM