IT Penetration Testing Services

The government authority in Washington, DC, requires a USA-based vendor to provide onsite IT penetration testing services that simulate real-world attacks to evaluate system security effectiveness. The contractor must perform these services using Agency-registered and approved IP addresses while strictly avoiding intentional system outages or data deletion. The scope of work encompasses reconnaissance and enumeration, vulnerability identification, exploitation and privilege escalation, internal lateral movement testing, impact analysis, and findings validation. All deliverables and procedures must adhere to industry standards, including OWASP guidelines. Eligible USA organizations must perform the work entirely onsite in Washington, DC. The buyer requests complete proposals for budget consideration, and interested vendors can submit their responses digitally through email or online portal channels. The provided text contains no further details regarding specific evaluation criteria or proposal submission deadlines.