Attack Surface Management Resource

The Department is soliciting proposals from a responsive and responsible Contractor to provide an Attack Surface Management (“ASM”) tool (“ASM tool” or “ASM resource”).

This procurement is being undertaken in accordance with New York State Finance Law Article XI. The Contractor selected will provide all necessary services as outlined in the Request for Proposals (RFP).

The Department requires an ASM resource to monitor the Department, Department-regulated entities, and crucial third-party service providers. The ASM resource will enable the Department to monitor for unpatched vulnerabilities in such entities’ and service providers’ systems and to identify potential cybersecurity threats to specific entities or industry segments. This monitoring tool will support data-driven actions and policy decisions such as providing targeted notifications to entities facing higher exposure risks and/or providing guidance focused on specific areas of concern.

The Request for Proposal (RFP) and related attachments are available for download from the Department's website at: https://www.dfs.ny .gov/procurement 

Important Dates:
Questions due by 3:00PM ET on Tuesday, August 19, 2025
Answers will be posted to our website on or around Monday, August 25, 2025
Due Date for Proposals: due by 3:00PM ET on Tuesday, September 9, 2025

UPDATE - New Due Date for Proposals as follows:
Due Date for Proposals: due by 3:00 PM ET on Tuesday, September 16, 2025