SOC & MDR (Managed Detection & Response): what local governments paid
24/7 security operations center (SOC-as-a-service), managed detection and response (MDR), and EDR/XDR endpoint platforms such as Arctic Wolf, CrowdStrike, SentinelOne, Huntress, Rapid7 and Sophos.
10 records · 5 states · stated/derived annual cost ranges $25,689 – $166,295. Vendors: Arctic Wolf, CrowdStrike, Huntress, Kroll, Rapid7, SentinelOne, Sophos.
See also: Cybersecurity (10) · Managed IT Services (MSP) (6)
Category sponsorship available. Sponsors are clearly labeled and never affect which records appear or how they're shown. Learn more
City of Alameda, CA — Arctic Wolf
Arctic Wolf cybersecurity services, 2-yr agreement
High confidence source re-checked 2026-11-01
- Contract amount
- $227,757 (2-yr NTE)
- Annual cost
- $113,878 (derived average)
- Term (years)
- 2
- Date
- 2025-07-02 (Legistar intro date)
- Status
- Agenda ready
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Same city: 1-yr CrowdStrike services via SHI NTE $83,803 (2026, ID 15623).
- Source
- Primary (Legistar legislation title via public Web API) · record TSP-0102
City of Rancho Palos Verdes, CA — Arctic Wolf
Arctic Wolf MDR + Managed Security Awareness, FY2026-27 (125 users, 35 servers)
High confidence source re-checked 2026-11-01
- Contract amount
- $30,000 (1-yr PO (quote $29,997.17))
- Annual cost
- $29,997 (quote total)
- Term (years)
- 1
- Date
- 2025-10-07
- Status
- Consent calendar
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Unit prices/yr: Core User Silver $121.76; Core Server Silver $121.57; log retention $8.38/unit; 100-series sensor $868.32; M365 monitoring $13.03/user; Managed Security Awareness Plus $24.29/user. Pricing guaranteed 3 yrs. Customer since 2019.
- Source
- Primary (agenda report + CDW-G quote) · record TSP-0085
City of Joliet, IL — CrowdStrike
CrowdStrike endpoint security solution (through CIS), annual
High confidence source re-checked 2026-11-01
- Contract amount
- $59,220 (Annual award)
- Annual cost
- $59,220
- Term (years)
- 1
- Date
- 2025-02-18 (Legistar passed date)
- Status
- Passed
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- 2026 annual renewal $65,142.00 (ID 13882): +10.0%. CIS resells CrowdStrike to SLTT governments.
- Source
- Primary (Legistar legislation title via public Web API) · record TSP-0103
City of Jersey City, NJ — Huntress
600 Huntress Managed EDR/NGAV endpoints with 24/7/365 SOC (Communications Center), CY2024
High confidence source re-checked 2026-11-01
- Contract amount
- $55,742 (1-yr total (1/1/2024-12/31/2024))
- Annual cost
- $55,742
- Term (years)
- 1
- Date
- 2024-02-07
- Status
- Approved (Res. 24-070)
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Derived: ~$92.90/endpoint/yr (~$7.74/endpoint/month). 2025 renewal approved at $55,391.00 (Res. 25-270: https://cityofjerseycity.civicweb.net/document/422238/Cyber%20protection%20software.pdf?handle=26B6CDEE9C414A58B22655CAF0CDAADB); 2026 see separate record.
- Source
- Primary (resolution 24-070) · record TSP-0083
City of Jersey City, NJ — Huntress
Huntress 24-watch EDR, CY2026 (order also lists Huntress Managed SIEM and Atera RMM)
Medium confidence source re-checked 2026-11-01
- Contract amount
- $133,991 (1-yr total (1/1/2026-12/31/2026))
- Annual cost
- $133,991
- Term (years)
- 1
- Date
- 2026-03-25
- Status
- Approved (Res. 26-134)
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- UNCERTAIN scope: scanned order pages mention Managed SIEM and Atera RMM add-ons and endpoint count is not legible, so the jump from $55,391 (2025) is not a like-for-like price change.
- Source
- Primary (resolution 26-134 + order) · record TSP-0084
Grand Traverse County, MI — Kroll
SentinelOne Complete EDR with Kroll Responder 24/7 MDR, 950 endpoints, 3 yrs
High confidence source re-checked 2026-11-01
- Contract amount
- $289,091 (3-yr total)
- Annual cost
- $96,364
- Term (years)
- 3
- Date
- 2024-07-10
- Status
- Staff request (special meeting)
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Quote line: Kroll Responder for Endpoint, 36 months, US$8,030.30/month, 950 endpoints. Derived: ~$8.45/endpoint/month (~$101/endpoint/yr). Includes a $1,000,000 cyber insurance policy. Competing quotes: Arete $207,106.80/yr (3-yr), Barracuda $84,240 (1-yr), Rehmann $81,756 (1-yr). Bought after a cyber 'event'.
- Source
- Primary (staff report + quotes) · record TSP-0080
City of Naperville, IL — Rapid7
Rapid7 Managed Detection and Response (MDR), 3-yr term
High confidence source re-checked 2026-11-01
- Contract amount
- $380,160 (3-yr NTE)
- Annual cost
- $126,720 (derived average)
- Term (years)
- 3
- Date
- 2025-07-15 (Legistar passed date)
- Status
- Passed
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Price history: 12-month term $116,062.21 (Dec 2023, ID 11271); 1-yr $120,598.94 (Jul 2024, ID 12292); 3-yr $380,160 (2025). That is about +5% per year when the three-year total is averaged.
- Source
- Primary (Legistar legislation title via public Web API) · record TSP-0100
City of Oakland Park, FL — SentinelOne
SentinelOne Complete (238 workstations, 12 workloads) + Vigilance Respond Pro 24x7 MDR (250 endpoints) + Ranger, 1 yr
Medium confidence source re-checked 2026-11-01
- Contract amount
- $33,951 (1-yr quote total (3/23/2023-3/22/2024))
- Annual cost
- $33,951
- Term (years)
- 1
- Date
- 2023-02-07 (Quote date)
- Status
- Quote attached to agenda item
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- UNCERTAIN: quote attachment only; commission action not captured. Unit prices/yr: Complete $68.77/workstation, $70.08/workload; Vigilance Respond Pro MDR $32.90/endpoint; Ranger $31.70/endpoint.
- Source
- Primary (vendor quote) · record TSP-0082
City of Novi, MI — SentinelOne
SentinelOne Singularity Complete EDR, cloud workload, network discovery, identity posture, premium support: 3-yr renewal (5/12/2026-5/11/2029)
High confidence source re-checked 2026-11-01
- Contract amount
- $77,066 (3-yr renewal total)
- Annual cost
- $25,689 (derived average)
- Term (years)
- 3
- Date
- 2026-04-20
- Status
- Consent agenda
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Quote line prices for the 3-yr term: Singularity Complete $89.86/workstation (394); Cloud Workload Security $183.12/server (48); Network Discovery $39.53/endpoint (442); Identity Security Posture $12.34/user (512); Premium Support $7,650.04; platform $1,431.50. Derived: ~$29.95/workstation/yr. EDR software, not a managed SOC.
- Source
- Primary (consent item + quote) · record TSP-0081
Broward County, FL — Sophos
Sophos Central Managed Detection and Response (MDR) Complete, Bid TEC2128072B1
High confidence source re-checked 2026-11-01
- Contract amount
- $508,295 (3-yr potential estimated amount)
- Annual cost
- $166,295 (initial year estimate; renewals est. $171,000/yr)
- Term (years)
- 3
- Date
- 2024-06-04 (Approved 9-0)
- Status
- Approved
- Category
- SOC & MDR (Managed Detection & Response)
- Notes
- Low bidder. Office of Regional Communications and Technology.
- Source
- Primary (Legistar legislation title via public Web API) · record TSP-0101