Penetration Testing Government Contracts
Penetration testing and ethical hacking services simulating cyberattacks to identify vulnerabilities in networks, web applications, and systems, including red team assessments, vulnerability scanning, security audits, and compliance testing using tools such as Metasploit, Burp Suite, Nessus, and Kali Linux.
86 open Penetration testing opportunities right now — 26 federal, 60 state & local.
Create a free account and we’ll email you when new Penetration testing opportunities are posted — scored against your business so you only see the ones that fit.
- State/localEDUCATION-17523 - USA (Jersey City, New Jersey) - Advanced Email Security, Phishing Simulation, and Security Awareness Training Services - Deadline July 14,2026Jersey City, NJ · due Jul 14, 2026
(1) Vendor needs to provide advanced email security, phishing simulation, and security awareness training services to the government authority located in Jersey City, NJ.– Provide a comprehensive, cloud–based solution th…
- FederalPersistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events)DEPT OF DEFENSE / DEPT OF THE ARMY · due Jul 14, 2026
Request for Information (RFI) Title: Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events [Grey Space]) Issued By: Army Con…
- State/localITES-10566 - USA (Georgia) - Cybersecurity Analyst Services - Deadline July 20,2026RFPMart: Georgia · due Jul 20, 2026
(1) Vendor needs to provide cybersecurity analyst services.• Monitor and analyze IT resources using security tools such as SIEM to find and mitigate incidents. • Analyze suspicious activities and finding their…
- State/localITES-10544 - USA (Georgia) - Cybersecurity Analyst Services - Deadline July 20,2026RFPMart: It Services Computer Maintenance & Technical Services · due Jul 20, 2026
(1) Vendor needs to provide cybersecurity analyst services.• Monitor and analyze IT resources using security tools such as SIEM to find and mitigate incidents. • Analyze suspicious activities and finding their…
- FederalPersistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events)DEPT OF DEFENSE / DEPT OF THE ARMY · due Jul 14, 2026
Request for Information (RFI) Title: Persistent Cyber Training Environment (PCTE) Cyber Range Development Software Application Project (Simulated Internet for Cyber Range Training Events [Grey Space]) Issued By: Army Con…
- State/localITES-10456 - USA (Indiana) - Independent Gaming Laboratory Services - Deadline July 22,2026RFPMart: Indiana · due Jul 22, 2026
(1) Vendor needs to provide independent gaming laboratory services to the government authority located in Indiana.– Independent gaming laboratories for the testing of electronic gaming–related equipment, technology, and…
- FederalJoint Cyber Intelligence Suite (JCITS) Malware Intelligence Triage Tool (JMITT) PlatformDEPT OF DEFENSE / DEFENSE COUNTERINTELLIGENCE AND SECURITY AGENCY (DCSA) · due Jul 27, 2026
This is a combined synopsis/solicitation for commercial products or commercial services prepared in accordance with part 12. This announcement constitutes the only solicitation. Offers are being requested and a separate…
- State/localITES-10458 - Barbados - Information and Communications Technology Support Services - Deadline July 17,2026RFPMart: It Services Computer Maintenance & Technical Services · due Jul 17, 2026
• Digital Infrastructure Audit:– Inventory and document all existing digital platforms, systems, and tools used in the renewable energy licensing portal and other energy related systems.– Evaluate system architectur…
- FederalSupport to Training & Adversary Replication (STAR)DEPT OF DEFENSE / DEPT OF THE AIR FORCE · due Jul 30, 2026
This contract will provide non-personal services through subject matter experts in the following areas: SATCOM, EA, GPS EA, Offensive Cyber Operations (OCO), intelligence product generation, and OW. This includes support…
- FederalDA01--Enterprise Cybersecurity Program Audit Support (VA-26-00036760)VETERANS AFFAIRS, DEPARTMENT OF / VETERANS AFFAIRS, DEPARTMENT OF
The acquisition strategy for Enterprise Cybersecurity Program Audit Support is still being determined, and answers to any technical questions asked are still being formulated.
- State/localNET-16573 - USA (Kingman, Arizona) - Network Firewall Consulting, Management, Upgrade, And Testing Services - Deadline July 24,2026Kingman, AZ · due Jul 24, 2026
(1) Vendor needs to provide network firewall consulting, management, upgrade, and testing services to the government authority located in Kingman, AZ.– Shall provide network firewall services to include, but not be limit…
- FederalOnline Presence Vetting (OPV)STATE, DEPARTMENT OF / STATE, DEPARTMENT OF · due Jul 14, 2026
The U.S. Department of State, Bureau of Diplomatic Technology (DT), Office of Consular Systems and Technology (CST), issues this Request for Information (RFI) for market research and acquisition planning purposes only. T…
- FederalNATO Request for Information: Red Team Mission Planning, Execution, and Debriefing (RT-MPEDS) SystemCOMMERCE, DEPARTMENT OF / BUREAU OF INDUSTRY AND SECURITY · due Jul 28, 2026
The NATO Communications and Information Agency (NCIA) has issued a Request for Information (RFI) to identify qualified vendors and gather input on potential solutions to support the upcoming acquisition of a comprehensiv…
- State/localITES-10548 - USA (Columbus, Ohio) - External IT Security Assessment Service - Deadline July 15,2026Columbus, OH · due Jul 15, 2026
(1) Vendor needs to provide external IT security assessment service to the government authority located in Columbus, OH. – An independent external assessment of information technology (IT) security program, including rev…
- FederalNATO Request for Information: Malware Analysis and Detection Engineering PlatformCOMMERCE, DEPARTMENT OF / BUREAU OF INDUSTRY AND SECURITY · due Jul 17, 2026
The NATO Communications and Information Agency (NCIA) has issued a Request for Information (RFI) to identify qualified vendors and gather input on potential solutions to support the upcoming acquisition of a Malware Anal…
- State/localRisk Assessment: Conducting Prison Security AuditsUnited States · due Jul 20, 2026
A well‑designed and well‑managed security audit program systematically reviews prison operations, policies, procedures, staff performance, physical security systems, and emergency preparedness to identify vulnerabilities…
- FederalNON-DESTRUCTIVE TESTING TRAINING COURSECOMMERCE, DEPARTMENT OF / NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY · due Jul 22, 2026
The National Institute of Standards and Technology (NIST) Center for Neutron Research (NCNR) owns and operates a 20 MW nuclear test reactor called the National Bureau of Standards Reactor (NBSR). The NBSR is located on t…
- FederalU006--VR&E Assessement Kits VR&E VARO 318 is seeking to procure tesing kits. The testing kits provide an online assessment tool that counselors utilize to help determine a Veteran's abilities,VETERANS AFFAIRS, DEPARTMENT OF / VETERANS AFFAIRS, DEPARTMENT OF · due Jul 13, 2026
This is a Sources Sought notice only. This is not a request for quotes and no contract will be awarded from this announcement. The Government will not provide any reimbursement for responses submitted in response to this…
- State/localSW-115947 - USA (Washington, DC) - Universal Automated Control Assessment, Validation and Risk Correlation Platform - Deadline August 19,2026RFPMart: Software System & Application · due Aug 19, 2026
(1) Vendor needs to provide universal automated control assessment, validation and risk correlation platform. • Operate Anywhere: function identically in cloud–native, enterprise on–premise, and disconnected/austere…
- FederalDesign Basis Threat and Target Sets (DBT)NUCLEAR REGULATORY COMMISSION / NUCLEAR REGULATORY COMMISSION · due Jul 25, 2026
Notice Type: Special Notice Agency: U.S. Nuclear Regulatory Commission Title: Design Basis Threat and Target Sets (DBT) Date: June 25, 2026 Classification Code: U008 - Education/Training- Training/Curriculum Development…
- FederalCyber Future Capability Directorate RFIDEPT OF DEFENSE / DEPT OF THE ARMY · due Sep 4, 2026
Title: Cyber Future Capability Directorate seeks solutions to solve challenges with Electromagnetic Warfare in Support of Army 2030-2040 requirements Department/Agency: Department of War Sub Agency: Department of Army Ma…
- State/localITES-10492 - USA (Spicer, Minnesota) - Managed Information Technology Services - Deadline July 17,2026Spicer, MN · due Jul 17, 2026
Vendor needs to provide managed information technology services to the government authority located in Spicer, MN.• 24x7x365 monitoring of denoted servers and critical network components.• 24x7x365 response to…
- State/localITES-10552 - USA (New York) - IT Consulting Services - Deadline July 27,2026RFPMart: It Services Computer Maintenance & Technical Services · due Jul 27, 2026
(1) Vendor needs to provide IT consulting services to the government authority located in New York.• Supply qualified IT professionals across roles such as application development, business analysis, project/program…
- FederalINTEGRATED TEST LABORATORY (ITL) SUPPORTHOMELAND SECURITY, DEPARTMENT OF / US COAST GUARD · due Jul 22, 2026
The ITL services being acquired are in support of Sea Commander and MCC systems aboard NSCs #1 through #10 and TRACEN Petaluma and include the following: Support multiple USCG environments used for Engineering Services a…
- FederalModeling, simulation, experimentation, prototyping, demonstration, and assessment of ground-based or ground-launched sensor algorithms, software, hardware, subsystems, and systems enabling advanced fires capabilities for the Army.DEPT OF DEFENSE / DEPT OF THE ARMY · due Jul 23, 2026
This is an unclassified Sources Sought Notification for DEVCOM AvMC. The Government intends to create and administer a consortium OT for DEVCOM AvMC projects. The Government intends to enter into a Consortium Member Agre…
- FederalSecurity Awareness/Simulation Tool (brand-name)FEDERAL RETIREMENT THRIFT INVESTMENT BOARD / FEDERAL RETIREMENT THRIFT INVESTMENT BOARD · due Jul 15, 2026
The Federal Retirement Thrift Investment Board (FRTIB) has a requirement for Security Awareness-Simulation Software Tool. The supplies shall meet the requirements stated in the attachment. This notice is a combined synop…
- FederalIntegrated National Intelligence Systems Cybersecurity, Engineering, and Technology Implementation (ICE-T)DEPT OF DEFENSE / DEPT OF THE NAVY · due Jul 30, 2026
Cybersecurity, Engineering, and Technology Implementation Support.
- State/localCzechia – Software support services – Subskripce forenzního SW a forenzní SW s technickou podporou pro boj s kyberkriminalitouCzechia · due Jul 15, 2026
Předmětem veřejné zakázky je pořízení subskripce (tj. časové licence) forenzního SW a pořízení forenzního SW včetně technické podpory. Předmětem veřejné zakázky je pořízení subskripce (tj. časové licence) forenzního SW…
- State/localNetherlands – IT services: consulting, software development, Internet and support – Europees openbare aanbesteding ICT-beheerNetherlands · due Sep 3, 2026
De inhoud van de opdracht ziet op dienstverlening met betrekking tot ICT-Beheer. De opdracht heeft betrekking op kantoorautomatisering, netwerkbeheer, mobiele telefonie, Azure, onderzoek software, op afroep aanwezigheid,…
- State/localEDUCATION-17448 - USA (Groton, Connecticut) - Phased Array Ultrasonic Testing Level 3 Certification Service - Deadline July 13,2026Groton, CT · due Jul 13, 2026
(1) Vendor needs to provide phased array ultrasonic testing level 3 certification service to the government authority located in Groton, CT. – Provide In–person course instruction, certification and examination on Phased…
- State/localITES-10557 - USA (Rockville, Maryland) - Information Technology Consulting and Contractual Services - Deadline July 27,2026Rockville, MD · due Jul 27, 2026
(1) Vendor needs to provide information technology consulting and contractual services to the government authority located in Rockville, MD. – Provide information technology, professional services and temporary personnel…
- State/localFIRE AND POLICE PSYCHOLOGICAL TESTING SERVICESCity of Naperville, IL · due Jul 30, 2026
The City of Naperville is soliciting proposals from experienced and qualified vendors to provide psychological testing services for public safety (Police and Fire) personnel. Specifically, the selected vendor will conduc…
- FederalVAIVI RAN Testing LicensesCOMMERCE, DEPARTMENT OF / OFFICE OF THE SECRETARY · due Jul 17, 2026
VIAVI SOLUTIONS INC is the incumbent contractor of the VAIVI RAN Testing Licenses with no authorized resellers. This is NOT a solicitation for quotations, quotation abstracts, a request for competitive quotations; or req…
- State/localITES-10451 - USA (New York) - RFI for Spring Framework Vulnerability Support Services - Deadline July 22,2026RFPMart: It Services Computer Maintenance & Technical Services · due Jul 22, 2026
(1) Vendor needs to provide spring framework vulnerability support services to the government authority located in New York.– Gather insights into vendor capabilities, service offerings, and best practices that enhance t…
- State/localSCREENING-2661 - USA (Naperville, Illinois) - Fire and Police Psychological Testing Services - Deadline July 30,2026Naperville, IL · due Jul 30, 2026
(1) Vendor needs to provide fire and police psychological testing services to the government authority located in Naperville, IL.– The psychological testing service should be able to provide both qualitative and quantita…
- State/localITES-10476 - Ireland - ICT Services - Deadline July 16,2026RFPMart: It Services Computer Maintenance & Technical Services · due Jul 16, 2026
(1) Vendor needs to provide ICT services to the government authority located in Ireland. – Service Desk support – Remote Desktop support (Windows Environment)– Managed Endpoint patching (Feature and security updates)– Su…
- FederalTechnical Support for the Development of Methods to Evaluate Exposures to Contaminated WaterHEALTH AND HUMAN SERVICES, DEPARTMENT OF / CENTERS FOR DISEASE CONTROL AND PREVENTION · due Jul 14, 2026
The Centers for Disease Control and Prevention intends to award a sole source firm fixed price contract to Eastern Research Group to obtain technical support services needed to enhance the evaluation of inhalation and de…
- State/localTBIPS - IT and Cyber Security Risk Management Services for ISC and CIRNAC - PSIB Set-AsideCanada (CanadaBuys) · due Jul 14, 2026
NOTICE OF PROPOSED PROCUREMENT (NPP) for TASK BASED INFORMATICS PROFESSIONAL SERVICES (TBIPS) This requirement is for: Indigenous Services Canada (ISC) This requirement is open only to those TBIPS Supply Arrangement Hold…
- FederalDA01--Enterprise Cybersecurity Program Audit Support (VA-26-00036760)VETERANS AFFAIRS, DEPARTMENT OF / VETERANS AFFAIRS, DEPARTMENT OF
Enterprise Cybersecurity Program Audit Support is intended to be solicited and released as an SDVOSB set-aside on GSA MAS IT PS SIN 54151S, anticipated for release in the early June timeframe. Additionally, this modifica…
- State/localAI-1084 - USA (Washington, DC) - AI-Driven Cybersecurity Platform Develop and Validate Solution - Deadline July 22,2026RFPMart: Artificial Intelligence & Machine Learning · due Jul 22, 2026
– Vendor needs to provide AI–driven cybersecurity platform develop and validate solution. – Develop and validate an AI–driven cybersecurity platform tailored to the urgent needs for Post–Quantum Cryptographic (PQC) readi…
- State/localTBIPS - IT and Cyber Security Risk Management Services for ISC and CIRNACCanada (CanadaBuys) · due Jul 14, 2026
NOTICE OF PROPOSED PROCUREMENT (NPP) for TASK BASED INFORMATICS PROFESSIONAL SERVICES (TBIPS) This requirement is for: Indigenous Services Canada (ISC) This requirement is open only to those TBIPS Supply Arrangement Hold…
- FederalBulgaria: Technical Assistance: Public Administration CybersecurityUNITED STATES TRADE AND DEVELOPMENT AGENCY / UNITED STATES TRADE AND DEVELOPMENT AGENCY · due Jul 20, 2026
The U.S. Trade and Development Agency is funding a Technical Assistance to support the Bulgaria: Technical Assistance: Public Administration Cybersecurity (2025-21004A). Interested U.S. firms may access the Request for P…
- State/localEDUCATION-17385 - USA (Albany, New York) - Internet Point and Insurance Reduction Program Monitoring Services - Deadline August 4,2026Albany, NY · due Aug 4, 2026
(1) Vendor needs to provide internet point and insurance reduction program monitoring services to the government authority located in Albany, NY.– Develop, implement, and administer a program to monitor the activities of…
- State/localConsultancy services for Upscaling of the Data Protection and Privacy Audit and inspection project to cover an additional Ten (10) Government Agencies — Uganda Digital Acceleration Project - GovNetWorld Bank · due Jul 16, 2026
REQUEST FOR EXPRESSION OF INTEREST (CONSULTING SERVICES – FIRMS SELECTION) UGANDA UGANDA DIGITAL ACCELERATION PROJECT – GOVERNMENT NETWORK (UDAP-GOVNET) PROJECT ID-P171305 LOAN NUMBER: IDA-68980 REFERENCE NUMBER: NITA-UD…
- FederalManaged Attribution Systems (Chameleon)JUSTICE, DEPARTMENT OF / DRUG ENFORCEMENT ADMINISTRATION · due Jul 31, 2026
The Drug Enforcement Administration (DEA) Cyber Support Section (ODV) needs to continue to modernize and streamline DEA’s Internet-based investigative resources with an integrated managed attribution and evidence collect…
- FederalProject Scoping Assessments-FY26 (PSA) at NortheasINTERIOR, DEPARTMENT OF THE / NATIONAL PARK SERVICE · due Aug 4, 2026
Project Scoping Assessments-FY26 (PSA) at Northeast Region Office
- FederalPACS and VASS Hardware and Software Maintenance Support ServicesENERGY, DEPARTMENT OF / ENERGY, DEPARTMENT OF · due Jul 19, 2026
Princeton Plasma Physics Laboratory, “PPPL”, requires a comprehensive, high-availability hardware and software maintenance support contract. This Request for Proposal (RFP) seeks proposals from qualified, factory-certifi…
- FederalBlackOhm GPS Tracker PackageDEPT OF DEFENSE / DEPT OF THE ARMY · due Jul 24, 2026
THIS IS A NOTICE OF INTENT TO AWARD A SOLE SOURCE CONTRACT AND IS NOT A REQUEST FOR COMPETITIVE QUOTES. The Alabama National Guard, USPFO intends to award a firm fixed price sole source under the authority of FAR subpart…
- State/localIT Security Assessments & Incident Response ServicesSouth Carolina · due Jul 21, 2026
- State/localJoint Cyber Intelligence Suite (JCITS) Malware Intelligence Triage Tool (JMITT) PlatformGeorgia · due Jul 27, 2026