Cybersecurity Penetration Test, Vulnerability Scan, and Risk Analysis Services

Kissimmee Utility Authority requires a vendor to provide cybersecurity penetration testing, vulnerability scanning, and risk analysis services. The selected vendor will perform network penetration testing across perimeter, public-facing, wired, and wireless environments. Additionally, the vendor must deliver a comprehensive IT cybersecurity risk analysis that reviews policies, procedures, network infrastructure, firewall rules, and database security to produce a response plan and improvement roadmap. Onshore USA organizations are eligible to perform the work onsite or offsite. All questions regarding solicitation RFP 26-067-SH must be submitted electronically through VendorLink by November 5, 2026, at 2:00 PM EST. Proposals and the mandatory Exhibit A Pricing Sheet must be uploaded to VendorLink by November 17, 2026, at 2:00 PM EST, and include the solicitation cover page. The anticipated contract term is three years with two optional one-year renewals.