Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cybersecurity Assessment and Penetration Testing Services

Active

State & Local

Response Deadline10/28/2026, 04:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Oregon → Department of Administrative Services

NAICS

541519 - Other Computer Related Services

Place of Performance

Salem, OR, 97301, USA

Set-Aside

NONE

Documents

This scope was carved out of S-10700-00018233.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Notice of Innovative Readiness Training Program 2027

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 27

subcontract

Response DeadlineOct 28

Submission deadline

Response Deadline

10/28/2026, 04:00:00 PM UTCin about 15 hours

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyOregon → Department of Administrative Services

ContactsNo contacts available

OfficeN/A

Organization / AgencyOregon → Department of Administrative Services

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs cybersecurity assessments and simulated attacks for prime contractors on State of Oregon Enterprise Information Services projects. Conducts vulnerability scans, penetration tests, and Red Team/Blue Team simulations using tools like Nessus, Burp Suite, and Metasploit. Requires CISSP, CEH, or OSCP certifications. Delivers a Cybersecurity Assessment Report, Vulnerability Matrix, and Exercise After-Action Report.

Similar Contracts

Same NAICS industry code

EMS LINQ-Software Maint/Support-CNP

Solicitation # SRC0000037179

The Alabama State Department of Education, Child Nutrition Programs, is soliciting a sole source contract for consolidated software maintenance and support for EMS LINQ applications. This contract ensures uninterrupted service for several USDA food and nutrition programs, including the National School Lunch Program, School Breakfast Program, Summer Food Service Program, Child and Adult Care Food Program, Commodity Supplemental Food Program, Emergency Food Assistance Program, and the Statewide Procurement Program. The scope of work covers ongoing operations for software updates, security patches, hosting services, annual subscriptions, regulatory updates, and technical support for tools such as the SNP, SFSP, and CACFP Core Modules, Cartwheel Meal Counter software, and LINQ FDP. The contract is effective from October 1, 2026, to September 30, 2027, with the possibility of annual renewals for up to five years or until a total contract cost of 25,000 dollars is reached. Price escalations are limited to a maximum of 5 percent of the annual cost and cannot exceed the total contract ceiling. Award evaluation may include cost realism and price reasonableness analysis, and selected suppliers must provide proof of qualifications, professional licenses, and certificates of insurance. Compliance requirements include registration with the Alabama Secretary of State for foreign entities, enrollment in E-Verify, and adherence to state tax laws and the Beason-Hammon Alabama Taxpayer and Citizen Protection Act.

Alabama State Department of Education, Child Nutrition Programs

POSTED

about 10 hours ago

DEADLINE

Security Lock and IDS Integration

Pbs Office Of Leasing

POSTED

about 13 hours ago

DEADLINE

NATO Business Opportunity: Provision of Global Seamless Vector Basemap Data

Solicitation # IFB-CO-424311-GVB

The NATO Communications and Information Agency (NCIA) is seeking a Global Seamless Vector Basemap Data Package under solicitation IFB-CO-424311-GVB to support NATO operations, missions, and activities. The required data must be compliant with STANAG 2592 and the NATO Geospatial Information Framework (NGIF), and it must be compatible with the Esri-based CoreGIS enterprise GIS solution. Key deliverables include vector data using Overture Maps conflated with vendor data in roman script, professional symbolization for specified scales, derived products such as routable networks and raster/vector caches, and comprehensive metadata. The procurement is classified as NATO UNCLASSIFIED and is being conducted using a Best Value evaluation method, with an informational rough order of magnitude estimate of EUR 3,500,000. Eligibility is restricted to vendors from participating NATO nations. U.S. prime contractors must maintain a professionally active facility within the United States and register with the Neo eProcurement tool. The data license must cover NATO and Non-NATO Entities for North Atlantic Council approved activities, with options for national use and future updates. The planned solicitation distribution is October 15, 2026, with an anticipated bid closing date of November 20, 2026, and an estimated contract award date of February 1, 2027. Interested parties must contact Principal Contracting Assistant Emira Kapetanovic to be added to the bidder's list.

Bureau Of Industry And Security

POSTED

about 13 hours ago

DEADLINE

RFI-FY27-SI Powered Communications and Video Intelligence

Solicitation # RFI-FY27-SI-Powered_Communications_Video_Intelligence

U.S. Immigration and Customs Enforcement (ICE) is seeking information for an Integrated SI-Powered Detention Communications and Video Intelligence Suite to support the Office of Enforcement and Removal Operations. This initiative requires a single integrated platform rather than a collection of separate products to provide communications, voice identity, and video intelligence across geographically distributed detention facilities. The scope of work encompasses software licenses, subscriptions, implementation, integration, configuration, testing, training, cybersecurity support, operations and maintenance, and transition services. The solution must be compatible with existing infrastructure to avoid wholesale replacements and must adhere to DHS Enterprise Architecture Compliance. Key technical and security requirements include a FedRAMP High baseline for hosted cloud solutions and strict adherence to data ownership and privacy regulations, specifically prohibiting the prediction of a person's emotional state. The procurement process is currently in the Request for Information stage, with mandatory UEI and SAM registration for respondents. While final contract terms, pricing, and evaluation factors are not yet established, the government has highlighted the need for tamper-proof packaging for shipments and the requirement for U.S. citizenship for certain roles. Acceptance of the final system will be determined through government-observed demonstrations, functional tests, and security reviews.

Information Technology Division

POSTED

about 13 hours ago

DEADLINE

FY27-31 D65 Spectrum Charter-Medford Cable Internet

Solicitation # 15M10227QA4700006

Department Of Justice US Marshal Service

POSTED

about 13 hours ago

DEADLINE

NATO Request for Information: Geospatial Enterprise Core Services (GECS) Capability Program

Solicitation # RFI-192830-GECS

Bureau Of Industry And Security

POSTED

about 13 hours ago

DEADLINE

in about 1 month

NATO Request for Information: Enhanced AirC2 – System Integration & Applications Marketplace

Solicitation # RFI-CO-42632900-eAirC2

Bureau Of Industry And Security

POSTED

about 13 hours ago

DEADLINE

in about 1 month

VC System Configuration and Technical SupportThis subcontract for VC System Configuration and Technical Support involves providing logical configuration and technical assistance for video conferencing systems on Pakistan Telecommunication Company Limited projects. The scope of work includes installing software, configuring user accounts, and optimizing network firewalls to ensure efficient video traffic. Additionally, the contractor is responsible for delivering comprehensive technical documentation and conducting end-user training to ensure personnel are fully equipped to operate the systems. The project is based in Pakistan and falls under NAICS code 541519. Interested parties must note the response deadline of November 3, 2026. The ultimate goal of the engagement is the delivery of a fully configured software environment and a trained workforce capable of maintaining the video conferencing infrastructure.

POSTED

about 14 hours ago

DEADLINE

Historical Case Data Migration ServicesThis subcontract for Historical Case Data Migration Services involves the extraction, transformation, and loading of both active and historical case data for prime contractors supporting San Bernardino County Human Resources projects. The primary objective is to migrate legacy data into a new SaaS platform utilizing specialized ETL software while ensuring strict adherence to security protocols and data integrity validation for sensitive HR information. The scope of work includes the delivery of a fully migrated dataset and the provision of data extraction tools to be used upon contract termination. This project is categorized under NAICS code 541519 and will be performed in San Bernardino, California. Interested parties should note the response deadline of December 15, 2026.

Human Resources

POSTED

DEADLINE

in about 2 months

Waters LCMS Software and Firmware Lifecycle ManagementThe Waters LCMS Software and Firmware Lifecycle Management subcontract involves the supply and installation of software updates, firmware upgrades, and technical patches for prime contractors working on Maryland Department of Health Office of the Chief Medical Examiner projects. The scope of work specifically focuses on applying bug fixes and feature releases for Waters LCMS proprietary software and firmware to ensure all systems are running updated and verified versions. To qualify for this engagement, the provider must be an authorized Waters software provider or a certified technician. This technical service falls under NAICS code 541519 and is managed through the state of Maryland. Interested parties should note the response deadline of October 29, 2026.

Office Of The Chief Medical Examiner

POSTED

DEADLINE

Cohesity DataProtect Service Subscription SupplyThis subcontract, issued by the Comptroller of Maryland, provides Cohesity DataProtect service subscriptions to prime contractors working on State government IT projects. The agreement covers the delivery of active software subscription licenses for 49 units of 1 TB capacity, totaling 49 TB of backup and recovery support for both on-premises and cloud workloads over a three-year term. To be eligible for this contract, providers must hold Master Contractor certification and maintain status as a certified Cohesity partner or reseller. The solicitation was posted on October 26, 2026, with a response deadline of November 2, 2026, falling under NAICS code 541519.

Comptroller of Maryland

POSTED

DEADLINE

Microsoft 365 Education License ProvisioningThis subcontract focuses on the provisioning of Microsoft 365 Education licenses for prime contractors supporting The Spencer Academies Trust. The scope of work includes the delivery of 3,100 M365 A3 Unified Edu subscriptions, 30,000 M365 A3 Student Use Benefit subscriptions, and 30 M365 A5 Unified Edu subscriptions, all of which must be assigned directly to the Trust's tenant. To ensure the continuity and activity of the software subscriptions throughout the contract term, the provider must maintain certified Microsoft Partner status. Interested parties should note that the response deadline for this opportunity is November 23, 2026.

The Spencer Academies Trust

POSTED

DEADLINE

More opportunities from Oregon → Department of Administrative Services

Same awarding agency

Cybersecurity Governance and Compliance Support

Administrative Management and General Management Consulting Services

POSTED

about 9 hours ago

DEADLINE

in about 15 hours

Notice of Innovative Readiness Training Program 2027

Solicitation # S-10700-00018233

The State of Oregon, through the Department of Administrative Services and Enterprise Information Services, has issued a presolicitation notice under solicitation number S-10700-00018233 for the Innovative Readiness Training Program 2027. The state intends to solicit assistance from the Department of Defense's Innovative Readiness Training Program to conduct cybersecurity assessments and exercises. These activities are scheduled to take place in Salem, Oregon, during the 2027 calendar year. This notice serves as a public announcement of the intent to seek military assistance. Interested parties or those wishing to provide comments or opposition regarding the military assistance for this project must contact Enterprise Information Services via email at [email hidden]. The deadline for submitting such comments or objections is thirty days after the first publication of the notice. The primary point of contact for this action is Purchaser Eva Chase.

POSTED

about 9 hours ago

DEADLINE

in about 15 hours

Fleet Reporting and Analytics ProviderThe Fleet Reporting and Analytics Provider subcontract, issued by the Oregon Department of Administrative Services, focuses on delivering advanced data analysis and reporting tools to monitor fuel efficiency and fleet spending for prime contractors on state projects. The selected provider will implement business intelligence software to create custom reporting dashboards, identify operational waste, and offer predictive analytics to assist with budgeting. Key deliverables include the development of a functional reporting dashboard and the submission of regular expenditure reports. The work is centered in Salem, Oregon, under NAICS code 541512. Interested parties must respond by November 5, 2026, following the posting date of October 19, 2026.

Computer Systems Design Services

POSTED

DEADLINE

E-Procurement Integration ServicesThe E-Procurement Integration Services subcontract, managed by the Oregon Department of Administrative Services, focuses on the technical integration of fleet card platforms with e-procurement systems for prime contractors operating on State of Oregon projects. The primary objective is the development of APIs and data interfaces designed to synchronize transaction data and automate the billing flow into existing financial systems, resulting in a fully functional and automated data interface. This project is categorized under NAICS code 541511 and will be performed in Salem, Oregon. Interested parties should note that the solicitation was posted on October 19, 2026, with a response deadline set for November 5, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

Fleet Card Program AdministratorThe Department of Administrative Services for the State of Oregon is seeking a Fleet Card Program Administrator to manage a comprehensive fuel and charge card system for prime contractors working on government vehicle projects. The selected subcontractor will be responsible for issuing cards to authorized personnel, maintaining a network of participating fuel stations, and overseeing payment processing and credit lines through a secure gateway to ensure operational card accounts. This subcontract opportunity is categorized under NAICS code 522291 and will be performed in Salem, Oregon. Interested parties must submit their responses by the deadline of November 5, 2026, to provide the necessary infrastructure for an active and managed fleet card program.

Consumer Lending

POSTED

DEADLINE

Request for Information Only for Fleet Card Services

Solicitation # S-10700-00018220

The State of Oregon Department of Administrative Services is issuing an informal Request for Information, solicitation number S-10700-00018220, to gather industry feedback regarding Fleet Card Services. This process is intended to aid in the development of future competitive solicitations and will not result in immediate contract awards or evaluations. The RFI specifically seeks information on implementation capabilities, integration with e-procurement systems, and industry-standard security, privacy, and compliance requirements. Additionally, the state is requesting input on common insurance coverage expected within the industry. Interested parties must submit concise responses without marketing materials by November 4, 2026, at 5:00 PM. Submissions must be sent electronically via OregonBuys or email to the primary point of contact, Jennifer Jolley. Required submission details include the company name, contact person, phone number, and email address. The place of performance is listed as Salem, Oregon.

Credit Card Issuing

POSTED

DEADLINE

Bulk Liquid Chemical Hauling and Delivery (Oregon Statewide)This subcontract involves the hauling and delivery of bulk liquid magnesium chloride for prime contractors working on Oregon Department of Administrative Services highway projects. The selected provider will be responsible for transporting bulk liquid chemicals from the point of origin to 104 designated storage sites throughout Oregon under FOB Destination terms. The scope of work requires the use of specialized bulk liquid tankers and offloading equipment compatible with state storage tanks. Personnel must possess a Commercial Driver's License with the necessary chemical hauling endorsements to ensure safe and compliant transport. The project is centered in Salem, Oregon, and falls under NAICS code 484220.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Bulk Supply of Corrosion-Inhibited Liquid Magnesium ChlorideThis subcontract involves the bulk supply of corrosion-inhibited liquid magnesium chloride for prime contractors working on Oregon Department of Administrative Services highway projects. The selected provider is responsible for manufacturing or sourcing a deicing chemical that meets strict corrosion-inhibited standards and is officially listed on the ClearRoads Qualified Product List. The scope of work includes the delivery of approved chemicals to designated state sites or loading points, with performance centered in Salem, Oregon. Interested parties must respond by October 31, 2026, to provide these essential materials under NAICS code 325920.

Explosives Manufacturing

POSTED

DEADLINE

Deicer Chemical for use on Oregon Highways

Solicitation # S-10700-00017286

The Oregon Department of Administrative Services, State Procurement Services, is soliciting a price agreement for the supply and delivery of corrosion-inhibited, liquid magnesium chloride to be used for melting ice on highways throughout the state. The contract involves delivery to 104 storage sites across Oregon with freight terms set as FOB Destination. The initial term of the agreement is four years, with renewal options that can extend the total duration to a maximum of ten years. The state intends to award the agreement to the lowest responsive and responsible bidder capable of supplying the entire state, although multiple awards by district may be issued if it serves the state's best interest. To be eligible, products must be listed on the current Qualified Product List and meet all specified technical requirements. Evaluation is based on minimum qualifications, responsiveness, responsibility, and price, with specific price preferences applied for goods processed in Oregon, benefit companies, and reciprocal state preferences. Bidders must submit a comprehensive package via OregonBuys, including a bid cover sheet, reference checks, a responsibility inquiry, and a detailed pricing form in Excel. Successful bidders must also comply with Oregon tax laws, non-discrimination policies, and safety standards, including OSHA and state health requirements.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

Technical Training & Knowledge TransferThis subcontract for Technical Training and Knowledge Transfer is issued by the Oregon Department of Administrative Services to provide specialized technical instruction for prime contractors. The scope of work involves the creation of administrator modules, support-team runbooks, and user guidance, culminating in a comprehensive Training Plan and the execution of training sessions. A critical requirement of the contract is ensuring that all digital materials adhere to WCAG 2.1 Level AA accessibility standards and that thorough knowledge transfer sessions are conducted for state personnel. The project is categorized under NAICS code 611430 and will be performed in Salem, Oregon. Interested parties should note that the solicitation was posted on October 1, 2026, with a response deadline of October 31, 2026.

Professional and Management Development Training

POSTED

DEADLINE

Security Compliance & Audit ServicesThe Security Compliance and Audit Services subcontract involves performing security validation and compliance auditing for prime contractors working on projects for the Oregon Department of Administrative Services. The primary scope of work includes validating system configurations against Statewide IT Control Standards and ensuring that logging practices adhere to CJIS, CMS, HIPAA, and IRS 1075 standards. Additionally, the contractor is responsible for conducting vulnerability monitoring and scanning, as well as delivering comprehensive security documentation and compliance validation reports. This opportunity is categorized under NAICS code 541690 and is based in Salem, Oregon. Interested parties should note that the solicitation was posted on October 1, 2026, with a response deadline of October 31, 2026.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

SSE Implementation & Integration ServicesThis subcontract for SSE Implementation and Integration Services supports prime contractors on projects for the Oregon Department of Administrative Services in Salem. The scope of work involves the technical deployment and integration of Security Service Edge solutions, specifically focusing on the configuration of application policies, device-posture controls, and identity/MFA integration. The selected provider will be responsible for executing a coordinated onboarding process for 50,000 users utilizing API integrations and Infrastructure as Code tools to deliver a validated SSE environment and Target Architecture. Due to the nature of the agency's data, the contractor must maintain strict familiarity with CJIS, HIPAA, and IRS 1075 compliance standards. This opportunity falls under NAICS code 541512 and requires a response by October 31, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS