IT Penetration Testing Services

The government authority in Washington, DC, requires a contractor to deliver IT penetration testing services offsite for a one-year contract period. The contractor must perform onshore (USA Only) Gray Box Testing outside the Agency's business hours, covering reconnaissance and enumeration, vulnerability identification, exploitation and privilege escalation, internal lateral movement, impact analysis, and finding validation. The buyer mandates that the testing cause no intentional system outages or data deletion. The vendor must identify network, system, or application vulnerabilities, evaluate existing security controls, identify potential risks, and provide recommendations, implementation options, and resource references to strengthen cybersecurity. Interested vendors must submit proposals digitally via email or online, and the buyer is actively seeking budget proposals. The provided text contains no specific evaluation criteria or key dates.