ITES-10923 - USA (Washington, DC) - IT Penetration Testing Services - Deadline October 1,2026

(1) Vendor needs to provide IT penetration testing services to the government authority located in Washington, DC.• The contractor shall provide Gray Box Testing which shall result in and include but not be limited to the following:1. Identify vulnerabilities within the Agency’s network, systems, and/or applications.2. Evaluate the effectiveness of existing Agency security controls.3. Identify potential risks4. Provide actionable recommendations to mitigate identified risks.5. Provide options for implementing solutions and resource references.6. Provide recommendations to strengthen the Agency’s cybersecurity.• Testing shall occur outside the Agency’s business hours and shall include, as applicable:• Reconnaissance and enumeration• Vulnerability identification• Exploitation and privilege escalation• Lateral movement (internal testing)• Impact analysis• Validation of findings• No intentional system outages or data deletion(2) The contract period will be for one year.