Enterprise cybersecurity protection. No RFP required.

CAI's VITA Security Operations Center (SOC) contract gives Virginia's counties, cities, towns, school divisions, and public bodies direct access to 24x7x365 threat monitoring and professional cybersecurity services through eVA, without a competitive solicitation.

Get started now by filling out our form

Fields marked with * are required

Built for however your team works

For IT and Security Leaders

See the platform, the stack, and the timeline

  • Sub-1% false positive rate, MTTD under one minute
  • EDR, NDR, SIEM, and DFIR, backed by an AI/ML engine cross-referencing 850M+ indicators of compromise
  • Fully operational in as few as 8 weeks — no rip-and-replace

See the technical details ↓

For Administrators and Procurement Leaders

See the pricing, procurement path, and eligibility

  • Predictable, subscription-based pricing. No surprise costs.
  • Aligned with the compliance standards your organization is already expected to meet — NIST, CJIS, HIPAA, and FERPA
  • Backed by a reliable partner with a 40+ year public sector track record

See pricing and procurement ↓

It’s not a matter of if – it’s when

Over the last 12 months, cyber-attacks have disrupted public services across the country, hitting every level of local government.

Water and Wastewater Facilities (WWF)

Malicious actors exploited internet-exposed programmable logic controllers (PLCs), locking operators out of their own devices and forcing several utilities into manual operation. Facilities across at least 7 states have reported impacts.

County Government

A second ransomware attack in three months was severe enough that the state activated a National Guard cyber protection unit and coordinated with the FBI.

Transit Agency

A ransomware attack disrupted transit services and real-time bus tracking. Data was later confirmed to be compromised, with attackers demanding a $3.3 million ransom.

Public School District

Classes were cancelled for a full day after a ransomware attack that came with a $1.2 million ransom demand, which the district refused to pay.

City Government

Police and fire dispatch had to reroute 911 calls through the county’s dispatch center. The entire IT network was also shutdown to contain the threat.

Everything your organization needs. One cooperative contract.

Core SOC and advanced cybersecurity capabilities available today through Contract VA-260126-CAI.

01

24x7x365 threat monitoring

02

Endpoint Detection and Response (EDR)

03

Network Detection and Response (NDR)

04

Security Information and Event Management (SIEM)

05

Digital Forensics and Incident Response (DFIR)

06

AI/ML-driven threat intelligence

07

Compliance alignment (NIST, CJIS, HIPAA, FERPA, PCI-DSS)

08

Cybersecurity professional services


Additional services available under this contract:

  • Table-top exercises (TTX)
  • Roadmap development
  • Security policy assessment (NIST CSF, ISO, CIS)
  • Red and purple teaming
  • Business continuity and disaster recovery planning
  • Cyber-related AI and data governance evaluations
  • NIST CSF maturity assessment
  • Cyber strategy advisory with executive leadership
  • Penetration testing (external, internal, web application)
  • Deep and dark web monitoring and reporting
  • Social engineering and phishing simulation

400+ organizations trust our cybersecurity and service delivery experts

180,000 alerts → 28 validated threats

Alerts reviewed over 6 months, down to real, validated threats. Zero time wasted chasing false positives.

Read the full success story →

First incident response plan

A large mass transit agency strengthened its cyber posture before an incident forced the issue, and it was praised by the Transportation Security Administration (TSA).

Read the full success story →

Live in as few as 8 weeks

No RFP. No formal bid process. Just a scoped Statement of Work standing between your organization and protection.

Weeks 1–2

Discovery and assessment

Weeks 3–5

Integration and onboarding

Weeks 6–8

Detection tuning

Week 8+

Fully operational MDR


Clear costs. No surprises.

Pricing scales with your environment (corresponding to EDR agents, NDR sensors, and SIEM ingestion), so a small town and a large county each pay proportionally to their footprint. It's designed to complement your existing tools, so there's no need to replace what's already working.

View the contract on VITA's portal ↗

Answers to common questions

Do we need to run an RFP or competitive solicitation?

No. Because this is a cooperative contract already competitively awarded by VITA, your organization can move directly to a scoped SOW through eVA. No separate solicitation required.

How fast can we get started?

Most organizations are fully operational within 8 weeks of kickoff. A scope and pricing estimate can typically be turned around within days of an initial call.

We're a small town with a limited budget and limited IT and security resources. Is this realistic for us?

Yes. Pricing scales with your environment, so smaller organizations aren't priced for a large county's footprint.

Who's eligible to use this contract?

All Virginia public bodies under Code § 2.2-4301 — counties, cities, towns, school divisions, special districts, councils of government, public education institutions, and federally recognized tribes — plus certain out-of-state and federal entities via a participating addendum.

Get your scope and pricing estimate

Tell us a bit about your organization, and our team will follow up.

  • No RFP required. Access is direct through your existing cooperative purchasing authority.
  • Predictable, subscription-based pricing. No surprise costs.
  • Estimates are tailored to your organization's size and current environment.
  • Backed by a reliable partner with a 40+ year public sector track record.