Maryland commercial cybersecurity
A Maryland cybersecurity purchase may qualify for a state tax credit.
Maryland companies can evaluate eligible cybersecurity technology and services through the Buy Maryland Cybersecurity Tax Credit program. Eligibility, awards, timing, and available funding are determined by Maryland Commerce.
Source-controlled status
eTrepid meets the QMCS definition for tax year 2026, subject to current program limits.
Maryland Department of Commerce has determined that eTrepid Inc. currently meets the definition of a Qualified Maryland Cybersecurity Seller (QMCS) for tax year 2026. The determination is subject to change based on current facts and circumstances. Commerce advises prospective buyers to contact the Department before completing a buyer application because certain sellers have reached the statutory cap for tax year 2026.
How the program works
Start with eligibility, scope, and timing.
Potential buyer benefit
A Qualified Maryland Company may claim 50% of the eligible net purchase price, up to $50,000 per tax year, when all program requirements are met.
Funding limits apply
Credits are first come, first served and subject to available funding. Annual funding is allocated between qualifying service and technology purchases.
Maryland decides
Maryland Commerce determines buyer and purchase eligibility. eTrepid can help define the requirement and supporting purchase information but does not award the credit.
Qualification path
Four questions shape the next step.
Buyer
Does the organization meet Maryland company, employee-count, and tax-filing requirements?
Purchase
Is the contemplated technology or service eligible under the current program?
Service activity
For services, does the work primarily perform an activity in the current NIST Cybersecurity Framework Core?
Availability
Are funding, buyer caps, seller caps, timing, and documentation requirements satisfied?
Important limits
A credit is not a discount or guarantee.
Program rules include a buyer annual cap, a seller-related statutory cap, annual seller recertification, and funding availability. Confirm current rules before relying on any estimated benefit.
Do not submit sensitive information
Use public forms only to describe the business need. Do not submit CUI, passwords, vulnerabilities, assessment artifacts, export-controlled data, or confidential architecture.
Controlled next step
Check fit before planning around a credit.
Start with a bounded readiness or requirement discussion. Final eligibility remains with Maryland Commerce.