Penetration Testing Government Contracts, Bids & RFPs

Löf avser att upphandla IT-konsulter för penetrationstester och säkerhetsgranskningar. Löfs behov omfattar resurser enligt nedan: En (1) IT-säkerhetsspecialist för penetrationstester och säkerhetsgranskningar av egenutvecklade system och applikationer. En (1) IT-säkerhetsspecialist för penetrationstester och säkerhetsgranskningar av IT-infrastruktur ur ett kontinuitets/säkerhetsperspektiv. Välkomna att lämna anbud! Vänliga hälsningar Löf

HUS-yhtymä (jäljempänä myös tilaaja tai hankintayksikkö) pyytää tarjouksia tietoturvatestauspalveluista tämän tarjouspyynnön ja sen liitteiden ehtojen mukaisesti. Tietoturvatestauksessa käytetään pääsääntöisesti määrämuotoista tietoturvamallia. Testaus noudattaa tarvittavia ja yleisesti hyväksyttyjä viitekehyksiä ja standardeja kuten CC (Common Criteria for Information Technology Security Evaluation), OWASP (Open Web Application Security Project) mukaan lukien OWASP ASVS ja OWASP LLM, WASC…

(1) Vendor needs to provide network environment penetration testing and security assessment services to the government authority located in Monument, CO. – Cybersecurity firms to provide baseline network penetration testing and security assessment services.– The engagement will include limited external and internal network testing, active directory and identity security review, microsoft 365/Entra id configuration review, and a focused review of systems supporting the police department.– The…

(1) Vendor needs to provide virtual chief information security officer (vciso) services will support the Fund in enhancing and maturing its cybersecurity program; strengthening cybersecurity governance, oversight, and accountability; improving cybersecurity risk visibility through metrics, reporting, and dashboards; enhancing incident preparedness, response, and recovery capabilities; and aligning cybersecurity practices to the government authority located in New York, NY.• Strengthen…

(1) Vendor needs to provide cyber security consultancy and technical services include to implementing risk analysis frameworks, incident handling processes, business continuity and disaster recovery plans, AI system security reviews (artificial intelligence), SAAS security reviews (Software as a Service) and supply chain security measures as well tabletop exercises and pen test reviews.– A comprehensive program addressing areas such governance, business continuity, risk management, operational…

(1) Vendor needs to provide cyber security consultancy services.– Development of the inspection methodology, risk assessment approach, maturity assessment and inspection related templates.– Seeking pragmatic, proportionate and streamlined approach to cyber security inspections.– Cyber security inspection methodology.– Develop a documented risk–based approach for selecting which entities to inspect and when.– Maturity assessment.– Approach to maintaining confidentiality, integrity, and…

(1) Vendor needs to provide network security software, hardware, and services to the government authority located in Frankfort, KY.1. Firewall Management: Implementing and managing firewalls like Checkpoint, Fortinet, and Palo Alto.2. Rule Base Analysis: Analyzing firewall rules to assess how changes impact effectiveness, efficiency, compliance, and risk (such as Algosec).3. Web Gateways: Implementing URL caching and filtering solutions (such as Forcepoint Secure Web Gateway).4. Endpoint…

(1) Vendor needs to provide information technology (IT) services to the government authority located in Montpelier, VT. – Provide strategies and solutions to defend hardware and software IT and telecommunications resources against adversaries such as viruses, worms and hackers for operating systems and applications, penetration testing and related IT security activities.– Analyze customer and citizen demand for IT–enabled services– Business analyst and project management services.– Online…

(1) Vendor needs to provide cybersecurity liability insurance services to the government authority located in McAllen, TX– Cybersecurity Insurance Services shall include:– Annual cybersecurity audit and external vulnerability scan – independent, third–party annual cybersecurity audit and external vulnerability scan to validate the efficacy of the district's internal vulnerability management systems and provide an external risk posture report for underwriting purposes– Loss Mitigation and…

(1) Vendor needs to provide IT support and network security services to the government authority located in Ireland.• 24 / 7 Managed Detection and Response service• Reactive Support and annual health check of existing HRI Firewalls• Security consultancy and advisory services• Security Penetration testing services• Option to supply of other security services(2) All questions must be submitted no later than September 1, 2026.(3) The contract period will be for four years.

(1) Vendor needs to provide security awareness and phishing simulation platform. • AI–Generated Phishing Scenarios: Ability of the platform to use integrated Large Language Models (LLMs) to dynamically generate highly realistic, contextual spear–phishing templates tailored to specific departments or user risk profiles.• Automated Campaigns: Support for automated, randomized “drip“ phishing campaigns to ensure employees do not receive the same tests at the exact same time.• Customization:…

(1) Vendor needs to provide global cybercrime and cryptocurrency assessment and intelligence gathering service to the government authority located in Washington, DC. • Addressing cybercrime and cyber–enabled crimes. Projects should focus on combating cyber intrusions, online fraud, online–facilitated drug trafficking, digital piracy, and the criminal misuse of cryptocurrency and virtual assets.• Establish comprehensive baseline understanding of online fraud harming Americans through…

(1) Vendor needs to provide NextGen cyber engineering, operations AI, and unified services. • Integrated cybersecurity engineering, cybersecurity operations and threat management, identity, credential, and access management (ICAM), artificial intelligence and automation–enabled capabilities.• Provide engineering, administration, and sustainment support for the FDA Cybersecurity Platform, including Security Information and Event Management (SIEM) and associated tools, AI–enhanced analytics,…

The New York City Police Pension Fund is seeking proposals from qualified and experienced firms to provide Virtual Chief Information Security Officer (vCISO) services. The selected firm will support the Fund in enhancing and maturing its cybersecurity program; strengthening cybersecurity governance, oversight, and accountability; improving cybersecurity risk visibility through metrics, reporting, and dashboards; enhancing incident preparedness, response, and recovery capabilities; and aligning…

Předmětem veřejné zakázky je vypracování komplexního auditu kybernetické bezpečnosti informačních systémů, síťové infrastruktury, serverové infrastruktury, tenantu Microsoft 365 a bezpečnostní dokumentace Zadavatele, příprava implementačního plánu opatření. Požadovaný rozsah auditu je blíže popsán v příloze č. 1 závazného návrhu smlouvy, která je přílohou č. 1 zadávací dokumentace. Dále je předmětem veřejné zakázky poskytování následných poradenských služeb v oblasti kybernetické bezpečnosti…

(1) Vendor needs to provide statewide cybersecurity resources services to the government authority located in MD.– Provide secure highly skilled professionals and teams capable of delivering advanced cybersecurity and privacy services across multiple domains, including governance, risk management, and compliance.– Strengthen their cybersecurity posture, mitigate risks, and ensure compliance with federal and state regulations.– Oversight and governance:– provide implementing robust risk…

Vendor needs to provide digital development services to the government authority located in Pennsylvania.1. Digital service discovery:– Includes, but is not limited to, the performance of initial research and analysis activities required to identify and define user needs and system requirements for digital service projects. Services include stakeholder interviews, user research, competitive analysis, persona identification, business process mapping, and initial prototyping to outline feasible…

The acquisition strategy for Enterprise Cybersecurity Program Audit Support is still being determined, and answers to any technical questions asked are still being formulated.

(1) Vendor needs to provide cybercrimes program enforcement services to strengthen the investigation and prosecution of cybercrimes against individuals in rural and remote communities to the government authority located in Anchorage, AK.– Expand statewide investigative capacity– Increase local digital investigation capability– Improve victim–centered investigations and offender accountability– Strengthen statewide collaboration and technical assistance(2) All question must be submitted no…

Crown Commercial Service (CCS) set up a dynamic purchasing system for a period of 60 months and has invited bidders to request to participate for the Cyber Security Services 3 DPS. This DPS provides central government departments and the wider public sector with the opportunity to procure cyber services from a range of suppliers. The DPS filters are for certification, services, standards and experience. Appointed suppliers will be invited by customers (buyers) to submit tenders for relevant…

(1) Vendor needs to provide cloud–based active assailant threat detection platform.– A secure, cloud–based Software–as–a–Service (SaaS) platform that continuously analyzes publicly available online information to identify behavioral indicators associated with potential targeted violence and other threats to public safety. – Include software licensing, secure cloud hosting, implementation, configuration, onboarding, administrator and end–user training, technical support, ongoing maintenance,…

(1) Vendor needs to provide managed IT and cybersecurity services to the government authority located in East Wenatchee, WA. – Provide comprehensive managed IT services and cybersecurity to support district operations.– Capable of delivering secure, reliable, and scalable IT services that support public health operations, regulatory requirements, and continuity of services.– Cybersecurity Services:• Managed Detection and Response (MDR).• Identity Threat Detection and Response (ITDR), including…

(1) Vendor needs to provide cyber security awareness and training platform.– An AI–enabled, customizable cybersecurity awareness and training platform that supports continuous human risk reduction beyond compliance–based training.– Provide a technology platform to enable cyber security awareness and training.(2) This is a brief information; Main RFP Document is not available on our website.

(1) Vendor needs to provide cyber security awareness and training platform.– An AI–enabled, customizable cybersecurity awareness and training platform that supports continuous human risk reduction beyond compliance–based training.– Provide a technology platform to enable cyber security awareness and training.(2) This is a brief information; Main RFP Document is not available on our website.

– Vendor needs to provide IT infrastructure service to the government authority located in city. – services and achieve measurable results, including system availability, data integrity, automated workflow functionality, compliance with applicable IT governance and security standards, operational reliability, end–to–end technical performance, and continuous improvement. – System availability and operational continuity, compliance with cybersecurity standards and policies, timely remediation of…

(1) Vendor needs to provide senior IT manager services.1. Systems and help desk management:– Administrate the M365 environment, including Active Directory, Defender, SharePoint, Intune and exchange.– Oversee and supervise all IT help desk and facilities (technology related) support requests across multiple offices; ensure accuracy and timeliness of responses.– Consult on and develop trainings for staff to build out the staff website.– Create content for the IT section of the staff website,…

C5ISRT NEXT GENERATION CYBERSECURITY AND INFORMATION ASSURANCEThe Naval Surface Warfare Center, Panama City Division (NSWC PCD) is soliciting capability statements from potential qualified sources to provide comprehensive full–lifecycle cybersecurity for the C5ISRT Division. The C5ISRT Division, is responsible for the cybersecurity of a large and diverse portfolio of mission–critical systems. This portfolio supports a wide range of stakeholders, including OPNAV N95, PMW 130, PMW 150, PMW 160,…

(1) Vendor needs to provide managed email security solution.– Solution should deliver both technology and managed services to protect users, prevent compromise, and improve the organization's overall email security posture.– Protect against malware, ransomware, and malicious attachments.– Improve visibility into email threats and attack trends.– Provides meaningful threat intelligence and visibility.– Proposed solution must include the following capabilities:• Email Threat Detection• Email…

Title: Cyber Future Capability Directorate seeks solutions to solve challenges with Electromagnetic Warfare in Support of Army 2030-2040 requirements Department/Agency: Department of War Sub Agency: Department of Army Major Command: T2COM Sub Command: Cyber FCD, Ft Gordon, GA Office: Science and Technology Branch, Experimentation Division Classification: Unclassified Description: THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for information and planning purposes – it…

Enterprise Cybersecurity Program Audit Support is intended to be solicited and released as an SDVOSB set-aside on GSA MAS IT PS SIN 54151S, anticipated for release in the early June timeframe. Additionally, this modification to the previous notice is being issued to provide responses to the technical questions submitted.