The Contractor shall provide the State Controller's Office (SCO) with QualysGuard vulnerability and compliance management Software-as-a-Service (SaaS). The Contractor shall: a. Provide SCO with QualysGuard software, to include: 1) Qualys Q-ESuite Express Suite; 2) Qualys Web Application Scanning; 3) Qualys Malware Detection Service for Sites; 4) Qualys Scanner Appliance - Annual Term; 5) Qualys Vulnerability Management, Detection, and Response (VMDR) Bundle; 6) Qualys Policy Compliance - Includes Policy Compliance Agent; 7) Qualys Patch Management (PM) – Annual Term for Windows Agent; 8) Qualys Endpoint Detection Response with Anti-Malware; 9) Qualys CyberSecurity Asset Management; 10) Qualys Security Assessment Express Package