The action being requested of the City Council is to review and consider the approval of the attached proposal for the purchase of a 3-year contract for Bitdefender MDR, XDR, and GravityZone Patch Management software services. This is a budgeted item proposed in the 24/25 Operation Software budget of Technology Solutions. The estimated amount is not to exceed $150,594.00 for the full 3-year term. The purchase would be made through a third-party vendor, vTECH iO DBA Computers At Work! Inc, who is a reseller partner of Bitdefender. This renewal would be made using the NCPA Contract 01-130 for Technology Products and Services.

The purpose of this purchase is to shift from the previous 1-year contract to a 3-year contract for Bitdefender’s Managed Detection and Response (MDR), Extended Detection and Response (XDR), and GravityZone Patch Management services. The decision to move to a 3-year contract allows the city to secure a more cost-effective, long-term solution for advanced cybersecurity measures, locking in a fixed price and avoiding potential cost increases in future renewals.

Bitdefender’s XDR continues to provide comprehensive Security Operations Center (SOC) services and advanced threat detection, monitoring both endpoint and network traffic in real time. The GravityZone Patch Management service automates patch deployments, helping maintain the city's cybersecurity hygiene and reducing exposure to vulnerabilities.

Previously, the city utilized these services under a 1-year contract, which has proven effective. However, transitioning to a 3-year contract will yield cost savings, improved stability in service delivery, and reduced administrative overhead by eliminating the need for annual renewals. The estimated total cost of the 3-year contract is $150,594.00, which provides both security and financial benefits over renewing annually.

The city previously relied on services from SecNap and Tyler Detect, which together cost over $80,000 per year. By continuing with Bitdefender’s services, the city will maintain a superior level of cybersecurity protection while benefiting from lower costs and enhanced threat detection capabilities.