Cybersecurity Assessment and Pen Testing Service

The government authority located in Chicago, IL, seeks a USA-based cybersecurity firm to evaluate its overall security posture by identifying technical, procedural, and human vulnerabilities across internal and external systems. The selected vendor must perform authenticated and unauthenticated testing of web applications and API endpoints, test Internet-facing hosts without credentials, conduct agentless internal vulnerability assessments, evaluate domain controller hardening, and review Microsoft Entra ID and M365 tenant configurations. Only onshore USA organizations are eligible to bid, and the contractor will perform all work offsite. The contract period will be for one year, and applicants can submit their proposals digitally via email or online.