ITES-11158 - USA (Chicago, Illinois) - Cybersecurity Assessment and Pen Testing Service - Deadline October 27,2026

(1) Vendor needs to provide cybersecurity assessment and pen testing service to the government authority located in Chicago, IL. – Provide cybersecurity firms to evaluate the housing authority’s overall security posture by identifying technical, procedural, and human vulnerabilities across internal and external systems.– perform authenticated and unauthenticated testing of web applications.– API endpoints (REST/GraphQL/SOAP).– Test for common vulnerabilities such as brute force attacks, weak credentials, and session management flaws.– Identify services running on Internet–facing hosts and assess them for vulnerabilities.– Scans will be conducted without authorized credentials to simulate realistic threat actor conditions.– conduct internal vulnerability assessments without deploying client software or persistent agents.– Evaluate domain controller hardening against industry benchmarks (e.g., CIS, Microsoft Security Baselines), including patch levels, service configurations, security, logging, and secure channel protections.– Review Microsoft Entra ID configurations and identify vulnerabilities (conditional access, MFA bypass, legacy auth), M365 tenant security (Exchange, SharePoint, Teams).(2) The contract period will be for one year.