NET-17614 - USA (Lockport, New York) - Internal and External Network Penetration Testing Services - Deadline November 19,2026

(1) Vendor needs to provide internal and external network penetration testing services to the government authority located in Lockport, NY. – External penetration testing:– Testing of all publicly accessible systems, applications, and network entry points.– Enumeration of exposed services and fingerprinting of externally visible infrastructure.– Attempts to exploit identified vulnerabilities while maintaining operational safety.– Web application testing (methodology) for County–owned applications.– Validation of firewall configurations, filtering rules, and intrusion detection effectiveness.– Review of email security controls, including phishing–resilience testing (optional, if included in quote).– Internal penetration testing:– Network reconnaissance and enumeration.– Privilege escalation attempts (local, domain, and lateral movement).– Active Directory security assessment (password policies, delegation, misconfigurations, Kerb roasting, etc.).– Assessment of security certificates and certificate infrastructure.– Workstation/server vulnerability exploitation attempts.– Review of segmentation controls and east–west traffic restrictions.– Security effectiveness testing for endpoint detection and response (EDR) tools.– Testing of wireless networks.(2) All the questions must be submitted no later than November 5, 2026.