City Council
Report
City Council Meeting: December 9, 2025
Agenda Item: 4.F
1 of 4
To: Mayor and City Council
From: Feroz Merchhiya, Chief Information Officer, Information Services Department Subject: Award Purchase Order to SHI International Corporation for Rapid7 Cybersecurity Software Subscription Licenses
Recommended Action
Staff recommends that the City Council:
1. Adopt a finding of no possibility of significant effect pursuant to Section 15061(b)(3) (Common Sense Exemption) of the California Environmental Quality Act (CEQA) Guidelines; and
2. Authorize the Procurement Manager to issue a purchase order with SHI International Corporation for Rapid7 Cybersecurity Software Subscriptions for the Information Services Department. This recommended award is made as an exception to the competitive bidding process pursuant to Santa Monica Municipal Code Section 2.24.250(c) and is for an amount not to exceed $201,140 for a one-year term with future year funding contingent upon Council budget approval. 2 of 4
Summary
The City utilizes Rapid7's cybersecurity software to monitor, detect, and alert on network intrusions, ransomware, and other cyber threats that could compromise City systems. Rapid7 also provides 24/7 live monitoring to augment the City's Information Security staff. Staff seeks City Council authorization to issue a purchase order to SHI International Corp. to renew the City’s Rapid7 cybersecurity software licenses for an additional one-year term.
This renewal ensures continued protection of the City’s network, servers, and endpoints under the City’s existing cybersecurity framework. Renewing through SHI, the City’s incumbent vendor, allows for streamlined license management, consistent pricing, and uninterrupted service continuity.
Discussion
Cybersecurity software is essential to protecting the City’s computer network from malicious attacks, data breaches, and ransomware. Rapid7 provides an all-in-one platform that continuously monitors the City’s systems and alerts staff to suspicious or malicious activity. The software also helps identify and address security weaknesses, reducing the risk of service interruptions or data loss.
Rapid7's Security Operations Center (SOC) expands the capacity of the City's Information Security team by providing around the clock monitoring and investigation capabilities. Alerts are triaged and escalated to the Information Security team as needed, allowing City staff to focus on high priority items more effectively, without being overextended. Rapid7 also provides advisory services and assistance with cybersecurity events, from small scale remediation instructions to full incident response capabilities.
Interruption to cybersecurity monitoring would effectively blind the City from a cybersecurity perspective. This renewal would ensure that the City continues to receive critical protection, regular updates, and support services that help keep systems secure and compliant with best practices without interruption. Centralized logging is a core 3 of 4
tenet of multiple regulations and losing that functionality puts the City at financial risk due to fines for non-compliance.
Vendor/Consultant Selection
Exception to Competitive Bidding
Staff recommends SHI International Corporation to provide Rapid7 software subscriptions as an exception to competitive bidding per the Procurement Division approved ECB# 327 pursuant to Santa Monica Municipal Code Section 2.24.250(c). c. Competitive procedures were followed by a governmental agency, federal, state, county, city, joint powers agency, special district, or cooperative purchasing agency and the goods or services are supplied to the City at the same or better price; Environmental Review
Staff has performed a preliminary environmental assessment of this project and, pursuant to CEQA Guidelines, section 15061(b)(3), has determined with certainty that there is no possibility that this project may have a significant effect on the environment.
This is because Rapid7 cybersecurity software subscriptions are a digital asset.
Therefore, this project is not subject to CEQA.
Financial Impacts and Budget Actions
Staff seeks authority to approve available funding from various funds to award a purchase order with SHI International Corporation for Rapid7 cybersecurity software subscription licenses.
Purchase Order Request
FY 2025-26 Request
Amount
Department/CIP Account
#
Total Contract Amount
$161,436 C0108900.689000 $161,436
$2,460 C1108900.689000 $2,460
$2,349 C1208900.689000 $2,349
$4,153 25170001.575030 $4,153
$5,034 C5008900.689000 $5,034
$906 C5108900.689000 $906
$552 C5308900.689000 $552
$3,206 C5408900.689000 $3,206
$1,788 C5708900.689000 $1,788
$641 C5908900.689000 $641
4 of 4
$15,241 C6008900.689000 $15,241
$2,061 C7008900.689000 $2,061
$1,313 C7508900.689000 $1,313
Total $201,140
Future year funding is contingent on Council budget approval.
Prepared By: Keenan McCardle, Principal Information Security Analyst Approved Forwarded to Council
Attachments:
A. City of Santa Monica - OAKS INITIATIVE FORM SHI
B. Levine signed by SHI 11.14.25