Buying Signals

Cybersecurity Solutions RFPs, Pre-RFP Signals and Bid Opportunities

See emerging pre-RFP opportunities from public-sector buyers this week based on contract renewal timing, meetings and job changes, and paired with verified contact info.

129Pre-RFP opportunities 8+Open RFPs

Monitoring 320k+ public sector buyers

Cybersecurity Solutions: Pre-RFP Opportunities

Source-backed signals from meeting minutes, budgets, contract activity, grants, and leadership changes.

New York Power Authority

NYSep 29

Why now

- NYPA recommended raising its cyber insurance tower to $100 million, a $25 million increase, based on peer benchmarking and maximum probable loss. - The recommendation places the excess $25 million through the captive while retaining the existing $5 million deductible there. - NYPA is evaluating new affirmative nation-state actor coverage through Aegis, offered for the first time this year, to cover losses currently excluded. - The cyber policy renewal is underway in the open market, with the term ending at year-end and treaty coverage being finalized now.

Meeting MentionPre-RFPDetected: Sep 29

Key Contacts · Verified by Starbridge

Raymond J. Corona

Audit Manager

Terrence Dilworth

Audit Manager

Shawnee County

KSSep 28

Why now

- Shawnee County IT Director Mark Price told commissioners that a western Kansas county suffered ransomware outages lasting several days, underscoring the regional threat. - The county is actively working to implement more multi-factor authentication methods and integrate systems into Microsoft to reduce password complexity. - IT staff blocked over 85 compromised emails from .gov institutions and quarantined 38 emails in one day, 18 containing malicious code. - A fake invoice scam targeted the planning department for thousands of dollars, but two-factor authentication blocked credential theft attempts.

Meeting MentionPre-RFPDetected: Sep 28

Key Contacts · Verified by Starbridge

Monica Mah-Michalski

Appraiser II

Melanie Roberts

Assistant Director

Legislature of Guam

GUSep 22

Why now

- Guam's legislature held a hearing on Bill 111-S, appropriating $19.9 million from Section 30 tax revenues for a new electronic health record system at Guam Memorial Hospital. - GMHA's IT administrator testified that the current EHR runs on a 20-year-old, unsupported architecture, creating security risks that cannot be patched, calling it 'every IT professional's nightmare'. - GMHA is drafting an RFP for the new EHR, expecting contract award within a year, with consultants recommending ways to engage sister health agencies. - The hospital is already rolling out endpoint protection and a 24/7 SOC with its managed security provider Ice…

Meeting MentionPre-RFPDetected: Sep 22

Key Contacts · Verified by Starbridge

Bernice F. Rivera

Administrative Assistant

Ann Marie San Nicolas

Administrative Officer / Committee Director

City of Isle of Palms

SCSep 1

Why now

- The Public Services Committee received a finalist assessment recommending interviews with VC3, Corsica Technologies, and Cantey Tech Consulting for its managed IT RFP, which includes cybersecurity and CJIS compliance needs. - The city's existing VC3 Managed Security contract, if VC3 is selected, would end on December 31, 2026, with cybersecurity functions continuing under a new consolidated managed IT contract starting January 1, 2027. - One vendor, Novatech, withdrew from the RFP because it was not CJIS certified, showing the city's stated emphasis on CJIS compliance in its evaluation criteria.

Meeting MentionPre-RFPDetected: Sep 1

Key Contacts · Verified by Starbridge

Niki Morris

Accounts Payable

David Hines

Building Inspector

North Carolina Department of Public Instruction

NCSep 3

Why now

- Secretary Denny declared cybersecurity the central challenge to government continuity, citing 13 billion intrusion attempts on state email systems. - The General Assembly approved the largest cybersecurity investment in state history: $26 million recurring plus $42 million one-time. - DIT's SecureNC program already protects nearly 300 websites with Cloudflare and deploys Tanium to about 25-26 local entities. - DIT is adding new offerings including incident response consultation, tabletop exercises, and planned remediation support with boots on the ground.

Meeting MentionPre-RFPDetected: Sep 3

Key Contacts · Verified by Starbridge

Lisa Ashe

6-12 Mathematics Consultant

Jessica Mapes

Accounting Controls & Reporting Manager

Land of Sky Regional Council

NCSep 1

Why now

- Hurricane Helene knocked out 75% of cell sites and destroyed over 1,700 miles of fiber, exposing severe vulnerabilities that prompted Land of Sky to commission a regional resiliency plan. - The plan, developed with 113 stakeholders across four counties, sets 42 actionable solutions under 8 goals, with cybersecurity baselines woven into every major objective. - It mandates multi-factor authentication for alert systems and security-by-design standards for resilience hubs, including segmented networks and access controls. - A three-tier prioritization framework and phased roadmap begin with a Regional Emergency Communications Coordination…

Meeting MentionPre-RFPDetected: Sep 1

Key Contacts · Verified by Starbridge

Christina Giles

Administration and Communications Director

Nathan Ramsey

Executive Director

Arlington Public Schools

VASep 24

Why now

Unlock the full why-now insight

Meeting MentionPre-RFPDetected: Sep 24

Key Contacts · Verified by Starbridge

Erin C. Tokajer

AAC Implementation Coach

Luis Matos-Malave

Activities Director

West Valley Water Dist

CASep 15

Why now

Unlock the full why-now insight

Meeting MentionPre-RFPDetected: Sep 15

Key Contacts · Verified by Starbridge

Linda Jadeski

Assistant General Manager

Greg Young

Board Director

See the other 12 signals + decision-makers

Start free to unlock the remaining Cybersecurity Solutions signals and view contact information for these buyers.

Unlock

Free. No credit card.

Open RFPs

ARMY AMMUNITION MANUFACTURING INNOVATION INDUSTRIAL BASE INTEGRATION TEAM COMMERCIAL SOLUTIONS OPENING REQUEST FOR SOLUTIONS

Department of the ArmyDC

Due Dec 16, 2026

Kronos Family of Systems Commercial Solutions Opening

Space Systems CommandCA

Due Aug 28, 2030

Army Contracting Command – Red River Army Depot (ACC-RRAD) Organic Industrial Base (OIB) Modernization Commercial Solutions Opening (CSO)

W6QK Army Contracting Command (ACC) Red River Army DepotTX

Due Oct 1, 2027

Request for Information - Message Operations and Information Exchange Support

National Geospatial-Intelligence Agency (NGA)VA

Closing Soon

Due Oct 28, 2026

HUD Technology Transformation Next Generation

Department of Housing And Urban DevelopmentDC

Due Apr 30, 2027

ESC-TECHSOLUTIONS2027 RFP

Southeast Kansas Education Service CenterKS

Due Oct 15, 2026

ESC-TECHSOLUTIONS2027

Southeast Kansas Education Service CenterKS

Due Oct 15, 2026

Information Technology Support Services NEXT GEN SOLE SOURCE RFP

Office of the Inspector General (DHS)DC

Closing Soon

Due Nov 12, 2026

Browse more Cybersecurity Solutions RFPs

Explore buyers

West Valley Water Dist

Recent intent

- The Safety and Technology Committee recommended, and the Board adopted via Resolution No. 2026-15, the SCADA Master Plan, establishing it as the District's modernization and cybersecurity framework. - The District's NIST CSF 2.0-based assessment scored 106 controls across 22 categories and found no SIEM, no formal incident response plan, and no OT asset management tools in place. - Short-term funded projects in the plan include a $200,000 HQ SCADA application modernization and an $85,000 OPR network segmentation and resiliency upgrade, slated for implementation within two years. - Mid-term plan projects include a $48,000 cybersecurity control gap reassessment and a response and recovery plan integration, each with an estimated eight-week timeframe. - Separately, staff rated SDI Presence, LLC highest among seven IT Master Plan proposals and recommended a $115,960 Professional Services Agreement for that work, which the Board was set to approve. - The SCADA Master Plan roadmap does not yet name a vendor for its cybersecurity remediation projects, leaving that selection open.
- West Valley Water District is advancing a SCADA Master Plan, developed by JEGO Systems, that documents significant cybersecurity maturity gaps across OT governance, asset management, and monitoring. - The plan's short-term projects include a $85,000 upgrade to implement network segmentation and high-availability infrastructure at the OPR Water Filtration Plant, addressing single points of failure. - A $200,000 project is slated to modernize SCADA applications at HQ using AVEVA System Platform, with a twenty-week implementation timeframe, signaling concrete procurement intent. - The plan identifies a need for formal incident response and recovery processes, response plans, and cyber insurance pressure, with a follow-on project to integrate these into operations. - Mid-term plans include a $48,000 cybersecurity control gap reassessment and a project to integrate the incident response plan, but specific vendor selections or budgets for these are not yet determined. - The plan explicitly notes no dedicated OT cybersecurity budget and no formal risk management strategy, highlighting that these are recommendations awaiting board approval and funding.

New York Power Authority

Recent intent

- NYPA recommended raising its cyber insurance tower to $100 million, a $25 million increase, based on peer benchmarking and maximum probable loss. - The recommendation places the excess $25 million through the captive while retaining the existing $5 million deductible there. - NYPA is evaluating new affirmative nation-state actor coverage through Aegis, offered for the first time this year, to cover losses currently excluded. - The cyber policy renewal is underway in the open market, with the term ending at year-end and treaty coverage being finalized now. - A final board decision on the recommended $100 million tower has not yet been made, as the renewal process is ongoing.

Shawnee County

Recent intent

- Shawnee County IT Director Mark Price told commissioners that a western Kansas county suffered ransomware outages lasting several days, underscoring the regional threat. - The county is actively working to implement more multi-factor authentication methods and integrate systems into Microsoft to reduce password complexity. - IT staff blocked over 85 compromised emails from .gov institutions and quarantined 38 emails in one day, 18 containing malicious code. - A fake invoice scam targeted the planning department for thousands of dollars, but two-factor authentication blocked credential theft attempts. - Commissioners asked about exploring fingerprint or retinal scan authentication, and the IT Director said he would explore options if the budget allows.

Legislature of Guam

Recent intent

- Guam's legislature held a hearing on Bill 111-S, appropriating $19.9 million from Section 30 tax revenues for a new electronic health record system at Guam Memorial Hospital. - GMHA's IT administrator testified that the current EHR runs on a 20-year-old, unsupported architecture, creating security risks that cannot be patched, calling it 'every IT professional's nightmare'. - GMHA is drafting an RFP for the new EHR, expecting contract award within a year, with consultants recommending ways to engage sister health agencies. - The hospital is already rolling out endpoint protection and a 24/7 SOC with its managed security provider Ice Square, which is expected to secure the new EHR. - Community health centers testified in support, but noted the bill's funding does not cover their required interface and security work, leaving interoperability needs unaddressed.

How to use pre-RFP signals

1. Shape the requirement

When you see a budget allocation or strategic plan mention, the agency is just beginning to define their need. Engage now to help write the specs before the RFP goes public.

2. Time your outreach

Don't cold call into the void. Use contract expiration signals to reach out to buyers exactly when they are unhappy with their incumbent or preparing to renew.

3. Arm your SDRs

Replace generic "checking in" emails with hyper-specific context. Reach out referencing their exact meeting minutes, named decision-makers, and approved budget line items.

FAQs

What is a pre-RFP signal for cybersecurity solutions?

A pre-RFP signal is a public-record indicator that a buyer is moving toward a cybersecurity solutions purchase before they've issued an RFP. Starbridge tracks six categories: meeting mentions, budget allocations, contract expirations, grant awards, leadership changes, and strategic plans.

How early does Starbridge detect cybersecurity solutions demand?

Six to eighteen months before a formal RFP, on average. The earliest signals are usually board meeting mentions or budget line items.

What sources does Starbridge monitor?

Public meeting minutes, board agendas, budget documents, contract expiration data, grant awards, public job postings, and leadership announcements across all 50 states.

Do I have to talk to sales to get the cybersecurity solutions report?

No. Enter your work email and the report is sent within minutes. A demo is optional.

What's in the free cybersecurity solutions report?

Ranked buyers with active cybersecurity solutions demand in your scope, open RFPs closing soon, expiring contracts with incumbent names, and verified buyer contacts.

How accurate are Starbridge's buyer contacts?

Validated against a 14,000-email test, Starbridge runs a 2% bounce rate. Comparable tools self-report 15 to 25%.

Explore buyers

West Valley Water Dist

Recent intent

- The Safety and Technology Committee recommended, and the Board adopted via Resolution No. 2026-15, the SCADA Master Plan, establishing it as the District's modernization and cybersecurity framework. - The District's NIST CSF 2.0-based assessment scored 106 controls across 22 categories and found no SIEM, no formal incident response plan, and no OT asset management tools in place. - Short-term funded projects in the plan include a $200,000 HQ SCADA application modernization and an $85,000 OPR network segmentation and resiliency upgrade, slated for implementation within two years. - Mid-term plan projects include a $48,000 cybersecurity control gap reassessment and a response and recovery plan integration, each with an estimated eight-week timeframe. - Separately, staff rated SDI Presence, LLC highest among seven IT Master Plan proposals and recommended a $115,960 Professional Services Agreement for that work, which the Board was set to approve. - The SCADA Master Plan roadmap does not yet name a vendor for its cybersecurity remediation projects, leaving that selection open.
- West Valley Water District is advancing a SCADA Master Plan, developed by JEGO Systems, that documents significant cybersecurity maturity gaps across OT governance, asset management, and monitoring. - The plan's short-term projects include a $85,000 upgrade to implement network segmentation and high-availability infrastructure at the OPR Water Filtration Plant, addressing single points of failure. - A $200,000 project is slated to modernize SCADA applications at HQ using AVEVA System Platform, with a twenty-week implementation timeframe, signaling concrete procurement intent. - The plan identifies a need for formal incident response and recovery processes, response plans, and cyber insurance pressure, with a follow-on project to integrate these into operations. - Mid-term plans include a $48,000 cybersecurity control gap reassessment and a project to integrate the incident response plan, but specific vendor selections or budgets for these are not yet determined. - The plan explicitly notes no dedicated OT cybersecurity budget and no formal risk management strategy, highlighting that these are recommendations awaiting board approval and funding.

New York Power Authority

Recent intent

- NYPA recommended raising its cyber insurance tower to $100 million, a $25 million increase, based on peer benchmarking and maximum probable loss. - The recommendation places the excess $25 million through the captive while retaining the existing $5 million deductible there. - NYPA is evaluating new affirmative nation-state actor coverage through Aegis, offered for the first time this year, to cover losses currently excluded. - The cyber policy renewal is underway in the open market, with the term ending at year-end and treaty coverage being finalized now. - A final board decision on the recommended $100 million tower has not yet been made, as the renewal process is ongoing.

Shawnee County

Recent intent

- Shawnee County IT Director Mark Price told commissioners that a western Kansas county suffered ransomware outages lasting several days, underscoring the regional threat. - The county is actively working to implement more multi-factor authentication methods and integrate systems into Microsoft to reduce password complexity. - IT staff blocked over 85 compromised emails from .gov institutions and quarantined 38 emails in one day, 18 containing malicious code. - A fake invoice scam targeted the planning department for thousands of dollars, but two-factor authentication blocked credential theft attempts. - Commissioners asked about exploring fingerprint or retinal scan authentication, and the IT Director said he would explore options if the budget allows.