Laserfiche WebLink
Page 1 of 2 <br />Item #6 <br /> CITY COUNCIL AGENDA REPORT <br /> <br />August 11, 2026 <br />Information Technology <br /> <br />TITLE: AUTHORIZE THE CITY MANAGER TO EXECUTE A THREE YEAR AGREEMENT <br />WITH DARKTRACE HOLDINGS, LIMITED, FOR CYBERSECURITY DETECTION <br />AND RESPONSE SOFTWARE AND MANAGED DETECTION AND RESPONSE <br />SERVICES IN AN AMOUNT NOT-TO-EXCEED $935,373 <br /> <br />SUMMARY <br />The City utilizes Darktrace's security platform to safeguard against cyber threats across City <br />information technology (IT) network, email system, and user identities. The City's current <br />Darktrace subscription is up for renewal. <br /> <br />Staff recommends the City Council authorize the City Manager to execute a new three-year <br />agreement with Darktrace to continued coverage through June 30, 2029. <br /> <br />RECOMMENDATION <br />Authorize the City Manager to execute an agreement with Darktrace Holdings, Limited, for <br />Darktrace cybersecurity detection and response software and managed detection and <br />response services in an amount not-to-exceed $935,373 over a three-year term <br /> <br />BACKGROUND <br />The City uses Darktrace's ActiveAI Security Platform to provide AI-driven detection and <br />autonomous response to cyber threats across its network, email, and identity environments. <br />The City's current Darktrace subscription is nearing the end of its term, and staff have <br />negotiated a renewal quote with Darktrace for a new three-year term beginning July 1, 2026, <br />and ending June 30, 2029. In addition to continuing the current cybersecurity detection and <br />response services currently provided, the agreement will add two new capabilities: monitoring <br />of the City's Supervisory Control and Data Acquisition (SCADA) network and Darktrace's <br />Managed Detection and Response (MDR) service. <br /> <br />DISCUSSION <br />The proposed agreement continues the City's existing Darktrace coverage across its Identity, <br />Network, and Email products. These products monitor user identities and cloud application <br />access, core network traffic, and email systems for anomalous or malicious activity, and use <br />autonomous response capabilities to contain threats in real time. <br /> <br />The recommended renewal includes Darktrace's new operational technology (OT) product, <br />which extends the platform's AI-driven anomaly detection to the City's Supervisory Control and <br />Data Acquisition (SCADA) network that monitors and controls critical infrastructure. <br />Cyberattacks targeting municipal OT and SCADA systems have increased in recent years, and <br />this addition closes a gap in the City's ability to detect threats to systems that could disrupt <br />essential City services. <br /> <br />Page 219 of 373