AI-Powered External Attack Surface & Cyber Threat Intelligence (CTI)

Background
Morgan State University, a historically Black institution and Maryland's preeminent public urban research university, is seeking to establish a continuous, AI-driven External Attack Surface Management (EASM) and Cyber Threat Intelligence (CTI) capability.
This initiative aims to provide the University with comprehensive visibility into its digital footprint, including the identification of 'Shadow IT,' leaked credentials, and emerging threats from the Deep and Dark Web.

Work Details
The contractor will provide the following services:
1. Continuous Asset Discovery: Automatically map and monitor all internet-facing assets (IPs, domains, SSL certificates, cloud instances) to eliminate 'Shadow IT.'
2. Dark Web Exposure Monitoring: Identify leaked institutional credentials and sensitive data in cybercriminal forums.
3. Brand & Executive Protection: Detect fraudulent websites and social media impersonations targeting University staff.
4. Operationalized Intelligence: Provide actionable Indicators of Compromise (IoCs) for integration into existing security platforms.

Specific tasks include deploying an automated discovery engine for external asset mapping, monitoring closed cybercriminal ecosystems for compromised credentials, implementing a 24/7 monitoring service for brand abuse, and utilizing generative AI for vulnerability intelligence.

Period of Performance
The contract term is three years with two one-year options for renewal at the University's discretion.

Place of Performance
The services will be performed at Morgan State University located in Baltimore, Maryland.

Bidder Requirements
This procurement has been designated as a Small Business Reserve (SBR). Offerors must ensure they are registered to do business in Maryland and in good standing regarding taxes and other obligations before the closing date.