Cybersecurity Testing & Compliance (SAST/DAST, Fuzz Testing)

The contract requires comprehensive cybersecurity testing services to ensure adherence to Department of Defense standards, encompassing automated and manual techniques including static application security testing, dynamic application security testing, and fuzz testing. These activities must be performed to identify and mitigate vulnerabilities in software systems, ensuring robust security posture across DoD-relevant platforms. The work is scoped under NAICS code 541690 and is positioned as a subcontract, with performance located at Aberdeen Proving Ground, Maryland, 21005. The opportunity was posted on April 28, 2026, with a firm deadline for proposals set for May 27, 2026, at 4:00 PM Eastern Time. The contracting entity is the Department of Defense through the W6QK Acc-apg office, though no specific point of contact or set-aside details are provided.