Penetration Testing Services

The Blue Lake Rancheria seeks a contractor to perform two penetration tests of the Tribe’s IT systems, funded by the Tribal Homeland Security Grant Program. The required scope includes external, internal, and social engineering penetration testing, as well as delivering testing plans, CVSS-scored finding reports, and validation retests. Only onshore USA organizations are eligible to bid, and performance of the work will be offsite at the vendor's premises. Proposers must submit one electronic PDF proposal by November 30th, 2026, at 5:00 PM Pacific, while written questions were due by October 15th, 2026. Required proposal contents include a cover letter, statement of qualifications, key personnel resumes, testing schedule, required certifications, and a detailed cost proposal. The committee will evaluate proposals based on experience, methodology, staff qualifications, cost and value, schedule, and past performance. The period of performance runs from January 1st, 2027, through April 31st, 2028, under a total contract budget that shall not exceed $40,000.