Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →
CLEATUS
Get CLEATUS

INFORMATION SECURITY ASSESSMENT AND TESTING SERVICES

Active
36016State & Local

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

Philadelphia Gas Works (PGW) is soliciting proposals under RFP 36016 for non-destructive vulnerability assessment and penetration testing services. The scope of work includes IT assessments of external gateways, internal network systems, and mobile wireless access controls, as well as OT architecture reviews and vulnerability assessments. IT assessments are to be performed annually, while OT assessments are conducted biennially. The selected vendor must provide detailed written reports on findings and tools used, along with executive summaries for management. The contract is for an initial one-year term with the option for up to four one-year renewals. Proposals must be submitted via pgw.procureware.com by 2:00 p.m. on November 3, 2026, with a clarification deadline of October 22, 2026. PGW will award the contract based on the most advantageous proposal, evaluating factors such as technical capacity, prior experience, solution quality, and long-term cost effectiveness. Proposers must provide a fixed price for IT and OT services separately and submit comprehensive documentation, including a W-9, banking information for ACH payments, and a required 17-1400 disclosure. Compliance with the Americans with Disabilities Act and strict confidentiality regarding all engagement data are mandatory requirements.

General Info

PGW seeks proposals for annual IT and biennial OT vulnerability and penetration testing.

Agency

Pennsylvania → Philadelphia Gas Works

NAICS

541519 - Other Computer Related Services

Place of Performance

PA, USA

Set-Aside

NONE

Documents

1

RFP 36016 Information Security Assessment and Testing Services

PDF, High priority: read this firstrfp
High

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

PhaseSolicitation
Posted

Solicitation

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyPennsylvania → Philadelphia Gas Works
Contacts1 person available
OfficePA, USA
Organization / AgencyPennsylvania → Philadelphia Gas Works
Office AddressPA, USA
Contacts
Contact
contact@example.gov

Full Description

Show more
Return to Bid List Procurement Opportunity NUMBER 36016 TITLE INFORMATION SECURITY ASSESSMENT AND TESTING SERVICES PROCESS One Step Unsealing BASE CURRENCY USD STATUS Open for Bidding CLOSES IN 19 days: 2 hours: 53 minutes: 30 seconds DESCRIPTION BID DOCUMENTS CALENDAR
You must log in to register for Bid Events and to view Bid Question and Response information.
NUMBER 36016 TITLE INFORMATION SECURITY ASSESSMENT AND TESTING SERVICES AVAILABLE DATE 10/15/2026 10:00 AM CLARIFICATION DEADLINE 10/22/2026 2:00 PM DUE DATE 11/3/2026 2:00 PM CONTACT INFORMATION LI.DENG@PGWORKS.COM BID TYPE RFP BILL TO Appoinvoices@pgworks.com, 800 W. Montgomery Ave - Attn: Accounting, Philadelphia , Philadelphia PA 19122 US SHIP TO North Operations Center, 5000 Summerdale Avenue, Philadelphia, PA 19124 US DESCRIPTION
Notice is hereby given that Philadelphia Gas Works (“PGW”) will receive sealed proposals on or before November 3, 2026, 2:00 p.m. Eastern Time, via pgw.procureware.com, for a vendor to provide vulnerability assessment and penetration testing services.
This document outlines PGW’s objectives, describes the general characteristics of the services to be provided, and (without being exhaustive) outlines the principal obligations of PGW and the selected Proposer.
Questions concerning this Request for Proposals shall be directed in writing to PGW via pgw.procureware.com.  Proposers may not contact PGW personnel regarding this RFP other than through pgw.procureware.com.
ANY QUESTIONS REGARDING THIS OPPORTUNITY MUST BE SUBMITTED NO LATER THAN 10/22/2026 2:00 PM

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
SLED
IT Security Assessment and Penetration Testing ServicesThis subcontract opportunity for IT Security Assessment and Penetration Testing Services involves performing non-destructive vulnerability assessments for prime contractors working on Philadelphia Gas Works IT infrastructure projects. The scope of work includes a wide range of security evaluations, such as external gateway testing, internal network exploitation, web application testing, and wireless access control assessments. Additionally, the contractor will be responsible for simulating data exfiltration and attempting privilege escalation to Root or Domain Admin levels. The selected provider must deliver comprehensive technical findings reports along with executive summaries to document their results. This project falls under NAICS code 541519 and is associated with the state of Pennsylvania. Interested parties should note that the response deadline for this solicitation is November 3, 2026.
Philadelphia Gas Works

POSTED

about 7 hours ago

DEADLINE

in 19 days
View Details
NAICS: 541519
New
Federal
Cloud Security and FedRAMP Compliance ConsultantThis subcontract opportunity for a Cloud Security and FedRAMP Compliance Consultant supports prime contractors working on Defense Commissary Agency projects within the Department of Defense. The primary objective is to ensure the security of SaaS environments through the implementation of security controls, the performance of rigorous security audits, and the comprehensive management of Authorization to Operate processes. The work will be performed in Fort Lee, Virginia, under NAICS code 541519. Qualified providers must possess deep technical expertise in FISMA, NIST SP 800-53, and FedRAMP standards to deliver a hardened cloud environment. Key deliverables include the procurement of security certifications and the submission of detailed compliance reports. Interested parties must submit their responses by October 29, 2026.
Defense Commissary Agency

POSTED

about 9 hours ago

DEADLINE

in 14 days
View Details
NAICS: 541519
New
Federal
DA10--Circle CVI Software or equivalent in support of VA Portland Healthcare System Portland, Oregon
Solicitation # 36C26027Q0080
260-NETWORK Contract Office 20 (36C260)

POSTED

about 9 hours ago

DEADLINE

in 19 days
View Details
NAICS: 541519
New
Federal
Cyber Security Engineering and Risk Management Framework Support
Solicitation # W91CRB-26-B-A006
Solicitation W91CRB-26-B-A006 is a small business set-aside for the Aberdeen Test Center to secure Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services. The contractor will provide all necessary personnel, equipment, and non-personal services to support the planning, execution, and maintenance of Authority to Operate (ATO) and RMF compliance for several systems, including the ATC LAN, LIN, STE, and T&EN. Key responsibilities include analyzing engineering changes to hardware and software baselines and supporting configuration management processes. The contract is structured as a Firm-Fixed-Price agreement with a total period of performance from September 1, 2026, to August 31, 2031, consisting of one base year and four option years. Award will be made to the lowest-priced, responsive, and responsible bidder under FAR Part 14 Sealed Bidding procedures, with a 10 percent price evaluation preference for HUBZone small business concerns. Bidders must provide proof of an active Secret Facility Security Clearance and certify that personnel possess Secret clearances, with one surge position requiring a Top Secret clearance. The evaluation is a pass/fail responsiveness check followed by a price evaluation, with no technical-price tradeoffs. Performance will be monitored via a Quality Assurance Surveillance Plan, and invoicing must be processed through the Wide Area Workflow application.
W6QK Acc-Apg

POSTED

about 9 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
Federal
IBM Mainframes and Maintenance for the FDIC
Solicitation # CORHQ-26-Q-0388
The Federal Deposit Insurance Corporation is soliciting quotes for solicitation CORHQ-26-Q-0388 to procure two new IBM zNext z17-ME2 mainframes and five years of maintenance to replace end-of-life equipment. This firm-fixed-price contract involves the delivery of hardware and associated components to the DIT Distribution Center in Arlington, Virginia, and the BDC in Carrollton, Texas. The period of performance begins on the date of award and extends for five years. To be eligible, offerors must be the Original Equipment Manufacturer or an Authorized Reseller/Partner of IBM and must provide proof of this status. The FDIC will utilize the Lowest Price Technically Acceptable evaluation method, awarding the contract to the lowest-priced responsive offer that meets minimum technical requirements and passes a financial capability assessment. Submissions must include a completed price schedule, representations and certifications, EULA or warranty terms, pre-award supply chain risk management information, and a letter of authorization from the manufacturer. All quotes are due by 12:00 PM EST on October 20, 2026. The procurement is not a small-business set-aside, and the small business size standard is 34 million dollars.
_

POSTED

about 9 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
International
FDM Fire Department Support and Maintenance
Solicitation # NOI # 210-10-22
City of Burnaby

POSTED

about 22 hours ago

DEADLINE

in 20 days
View Details
NAICS: 541519
New
DIBBS
MEMORY UNIT, DATA STORA
Solicitation # SPE8EN-27-T-0150
Solicitation SPE8EN-27-T-0150 is a fixed-price contract issued by DLA Troop Support, Construction and Equipment T and IFO EQ for the procurement of one data storage memory unit, identified by NSN 7025-01-623-7946 and part number RRTP-FA00G-CF-RNR from Red Rock Technologies Inc. The delivery is set for FOB Origin with a required delivery date of February 25, 2027, and a need ship date of April 12, 2027. The item is to be delivered to the DLA Distribution DDSP New Cumberland Facility in Pennsylvania, with inspection and acceptance occurring at the destination. The contract mandates strict adherence to DLA packaging and marking standards, specifically MIL-STD-2073-1E and MIL-STD-129, and incorporates technical requirements from the DLA Master List, including RP001 and RD003. Environmental restrictions prohibit the intentional addition of mercury or mercury-containing compounds to the hardware. Administrative requirements include electronic invoicing via the Wide Area WorkFlow system and compliance with DFARS 252.204-7012 for safeguarding covered defense information. The solicitation is subject to the Buy American Act and Berry Amendment, and it utilizes the HUBZone price evaluation preference for eligible concerns.
CONSTRUCTION & EQUIPMENT T & IFO EQ

POSTED

1 day ago

DEADLINE

in 11 days
View Details
NAICS: 541519
New
International
Cisco Integrated Service Router (ISR) Maintenance RenewalThis subcontract agreement with the York Regional Police focuses on the provision of official maintenance and support renewals for Cisco Integrated Service Routers. The services must be delivered through authorized Cisco Canada channels or approved distributors to ensure official support for prime contractors working on network projects. The contract covers a specific performance period running from November 10, 2026, to November 9, 2027. To be eligible, the service provider must maintain Authorized Cisco Partner status and ensure that all personnel have completed required AODA training. This engagement falls under NAICS code 541519, emphasizing the technical nature of the network maintenance and support required for the organization's infrastructure.
York Regional Police

POSTED

1 day ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
Federal
Cybersecurity Readiness and Security Authorization FacilitationThe Cybersecurity Readiness and Security Authorization Facilitation subcontract supports NIWC Atlantic projects for the Department of Defense by assessing the security and technical feasibility of commercial software. The primary objective is to perform security gap analyses on COTS software and develop security-readiness frameworks to accelerate Authority to Operate timelines. The selected provider will guide vendors through specific authorization requirements and deliver comprehensive security assessment reports and readiness roadmaps. Technical requirements for this engagement include expertise in the Risk Management Framework and FedRAMP, as well as the utilization of vulnerability scanners and compliance mapping software. This opportunity is categorized under NAICS code 541519 and is associated with performance in the 29410 zip code area. Interested parties must adhere to the response deadline of October 22, 2026.
Niwc Atlantic

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 541519
New
Federal
Cisco DNA and Software License ProviderThis small business set-aside subcontract supports prime contractors on projects for the Naval Research Laboratory within the Department of Defense. The scope of work involves providing essential software licenses and maintenance, specifically focusing on Cisco DNA Advantage 48-port 5-year term licenses, TE agents for IOSXE on C9K, Cisco ThousandEyes Enterprise Agent licenses, and Cisco DNA Spaces Extend Term Licenses. To ensure technical compliance, the provider must hold OEM Cisco Certification and is responsible for delivering electronic license keys along with proof of support. The performance of this contract is centered in Arlington, Virginia, under NAICS code 541519.
Naval Research Laboratory

POSTED

1 day ago

DEADLINE

in 4 days
View Details
NAICS: 541519
New
Federal
Cybersecurity Auditing & ComplianceThe Cybersecurity Auditing and Compliance subcontract, managed under the Department of Homeland Security's Investigations and Operations Support Dallas, focuses on providing independent security auditing and compliance monitoring for AI and data systems used by prime contractors for ICE/HSI. The scope of work includes establishing audit logs for AI inputs and outputs, verifying that data leakage to external models is prevented, and utilizing SIEM tools to test data masking and role-based access controls. The primary objective is to ensure strict adherence to federal security boundary standards and specific ICE AI contract language. The selected provider will be responsible for delivering comprehensive audit reports and formal compliance certifications. This opportunity is categorized under NAICS code 541519, with the place of performance located in Lincoln, Nebraska.
Investigations And Operations Support Dallas

POSTED

1 day ago

DEADLINE

in 11 days
View Details
NAICS: 541519
New
Federal
36C255-27-AP-0383 - IVX & Cerner to Interface with EHRM
Solicitation # 36C255-27-AP-0383
The Department of Veterans Affairs, through Network Contracting Office 15, has issued a Sources Sought Notice for market research to identify capable vendors for an interface between the Electronic Health Record Modernization (EHRM) and the existing IVX IV workflow management solution. This project is located at the Harry S. Truman Memorial Veteran’s Hospital in Columbia, Missouri. The primary objective is to ensure the continued functionality of the IVX system through the implementation of an HL7 interface and a virtual cloud implementation. The scope of work includes the delivery and installation of one IVX HL7 interface implementation, one virtual cloud implementation, and 16 units of bill integration support services. Additionally, the requirement includes one year of preventative maintenance and support covering bug fixes, minor release upgrades, and telephone support during standard business hours. Interested respondents must provide company identification, their SAM.gov Unique Entity ID, and a capabilities statement demonstrating their ability to meet these requirements. They must also confirm their business size status under NAICS code 541519 and provide any applicable manufacturer authorization letters. Responses are due by October 27, 2026, via email to the primary point of contact, Teresa Cabanting.
255-NETWORK Contract Office 15 (36C255)

POSTED

1 day ago

DEADLINE

in 12 days
View Details

More opportunities from Pennsylvania → Philadelphia Gas Works

Same awarding agency

NAICS: 541512
New
SLED
Operational Technology (OT) and SCADA Security ReviewThis subcontract opportunity for Philadelphia Gas Works focuses on providing specialized Operational Technology and SCADA security reviews. The selected provider will perform architecture reviews and vulnerability assessments for prime contractors, specifically analyzing industrial control hardware configurations and SCADA systems to ensure compliance with TSA Security Directives Pipeline Series. The project requires deep expertise in OT/ICS security to deliver comprehensive technical findings reports and executive summaries. Interested parties should note the response deadline of November 3, 2026, for this engagement categorized under NAICS code 541512.
Computer Systems Design Services

POSTED

about 7 hours ago

DEADLINE

in 19 days
View Details
NAICS: 541690
New
SLED
Social Engineering and Physical Security AssessmentThe Social Engineering and Physical Security Assessment is a subcontract opportunity for Philadelphia Gas Works security projects. The selected contractor will be responsible for performing simulated attacks on human behavior and physical access controls to identify vulnerabilities. This includes executing social engineering simulations to exploit user behaviors and attempting unauthorized physical access to sensitive information and computing hardware. The contractor must provide a detailed written report documenting all findings and the specific methods used to bypass security measures. This opportunity was posted on October 15, 2026, with a response deadline of November 3, 2026, falling under NAICS code 541690.
Other Scientific and Technical Consulting Services

POSTED

about 7 hours ago

DEADLINE

in 19 days
View Details
NAICS: 323113
New
SLED
Signage Material SupplyThis subcontract for Philadelphia Gas Works involves the supply of raw materials and high-resolution printed vinyl for fleet vehicle projects. The selected provider will be responsible for producing graphics using automotive-grade vinyl and protective laminates according to specific drawings and requirements, ensuring all delivered decals and signage materials are new and free from defects. The project falls under NAICS code 323113 and requires the delivery of materials to a designated site. Interested parties should note the posted date of October 14, 2026, with a response deadline of October 21, 2026.
Commercial Screen Printing

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 238990
New
SLED
Fleet Vehicle Signage & Graphics InstallationThis subcontract involves the design, production, and installation of signage and graphics for fleet vehicles belonging to Philadelphia Gas Works. The selected provider will work under prime contractors to prepare vehicle surfaces and apply logos, decals, and informational signage according to specific drawings and samples. All deliverables must be new, free of defects, and fully branded before final delivery in Philadelphia, Pennsylvania. The project falls under NAICS code 238990 and is managed by Philadelphia Gas Works. Interested parties must adhere to the timeline associated with the October 2026 posting, ensuring all requirements for high-quality workmanship and precise application are met to maintain the professional standards of the fleet.
All Other Specialty Trade Contractors

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 339950
New
SLED
ONE-TIME PURCHASE ORDER FOR SIGNAGE FOR PGW FLEET VEHICLES
Solicitation # 36014
Philadelphia Gas Works is soliciting a one-time purchase order for signage for its fleet vehicles under solicitation number 36014. This opportunity is open for bidding with a response deadline of October 21, 2026. The contract is governed by Small Dollar Standard General Bidding Terms and Conditions and requires that all provided articles exactly conform to specified samples or descriptions, be new, and be free from defects. The seller assumes all risk of loss until delivery and acceptance by the buyer in Philadelphia, Pennsylvania. Bids must be submitted in ink or typewritten on official PGW forms and signed by an authorized representative. Evaluation is based on price and the responsibility of the bidder, including their qualifications, integrity, and capacity to perform. In the event of a tie, payment discounts may be considered. Selected vendors must adhere to strict electronic invoicing requirements, submitting searchable PDFs to a designated email address and accepting payments via ACH. Additionally, contractors must comply with various federal labor and non-discrimination laws, including the Small Business Act and the Rehabilitation Act of 1973.
Sign Manufacturing

POSTED

1 day ago

DEADLINE

in 6 days
View Details
NAICS: 484220
New
SLED
Freight Transportation for 20" Steel PipeThis subcontract involves the transportation and delivery of 6,006 feet of 20 inch steel pipe to support Philadelphia Gas Works infrastructure projects. The contractor is responsible for coordinating heavy haul shipments using either flatbed or rail transport, with a specific requirement that all rail transport adheres to the latest revision of API 5LI standards. The materials must be delivered F.O.B. Destination to Liberty Coating in Morrisville, Pennsylvania, with a final completion deadline of December 7, 2026. This project falls under NAICS code 484220 and is managed through the Philadelphia Gas Works procurement process.
Specialized Freight (except Used Goods) Trucking, Local

POSTED

6 days ago

DEADLINE

in 4 days
View Details
NAICS: 331210
New
SLED
Supplier of 20" Domestic Bare DRL Black Steel PipeThis subcontract agreement requires the procurement of 6,006 feet of 20-inch domestic bare double random length black steel pipe to support Philadelphia Gas Works gas distribution projects. The supplier must provide U.S.-made pipe stamped X42 or A53B that conforms to API 5L or A53B ERW standards, ensuring the material is free of lacquer and mill coating. The selected supplier is responsible for providing all necessary mill certifications and tally sheets, as well as completing required paint stenciling. All materials must be delivered to the designated location in Morrisville, Pennsylvania.
Iron and Steel Pipe and Tube Manufacturing from Purchased Steel

POSTED

6 days ago

DEADLINE

in 4 days
View Details
NAICS: 331210
New
SLED
ONE-TIME PURCHASE OF 20" DOMESTIC BARE DRL BLACK STEEL PIPE (NO LACQUER)
Solicitation # 36013
Philadelphia Gas Works is soliciting bids for a one-time purchase of 6,006 feet of 20-inch domestic bare double random length black steel pipe. The material must be domestic, free of lacquer, and stamped with either X42 or A53B; no alternatives or lacquer-coated pipes will be accepted. All pipe must be delivered to Liberty Coating in Morrisville, Pennsylvania, by December 7, 2026. Bids are due by 2:00 PM EST on October 19, 2026, via the ProcureWare portal. The award will be granted to the lowest responsive and responsible bidder, with preference given to U.S.-made products and consideration for lead times and best and final offers. Strict compliance with technical specifications is required, including the provision of mill certifications, tally sheets, and specific paint stenciling on the pipe surfaces. Bidders must submit a complete packet including pricing, lead times, a signed bidder certification, a certificate of non-indebtedness, and a completed demographic survey. Payment terms are Net 30 days via ACH, with freight paid F.O.B. destination. Invoices must be submitted electronically as searchable PDFs to the designated accounts payable email. This procurement is subject to the Pennsylvania Steel Products Procurement Act and the Pennsylvania Prevailing Wage Act.
Iron and Steel Pipe and Tube Manufacturing from Purchased Steel

POSTED

6 days ago

DEADLINE

in 4 days
View Details
NAICS: 484220
New
SLED
Heavy Equipment Transport & DeliveryThis subcontract for Heavy Equipment Transport and Delivery involves the pickup and delivery of heavy rental machinery, including cranes and dump trucks, for prime contractors working on Philadelphia Gas Works operations projects. The selected provider will utilize low-boy trailers and heavy-haul trucks to ensure the safe transport and retrieval of equipment to designated locations. The contract requires strict adherence to transportation safety regulations and mandates that insurance policies name both Philadelphia Gas Works and PFMC as additional insureds. Interested parties must respond by October 23, 2026, under NAICS code 484220.
Specialized Freight (except Used Goods) Trucking, Local

POSTED

6 days ago

DEADLINE

in 8 days
View Details
NAICS: 532490
New
SLED
Boom Lift Rental ProviderThis subcontract agreement establishes a partnership for the supply and rental of boom lifts to support prime contractors working on Philadelphia Gas Works operations projects. The provider is responsible for delivering operational equipment to designated sites and offering flexible rental terms on a daily, weekly, or monthly basis. A critical operational requirement is the ability to fulfill equipment requests within a 24-hour window, with all preventative maintenance performed on-site at no additional cost. To ensure regulatory and financial compliance, the provider must adhere to the Pennsylvania Prevailing Wage Act. Additionally, the contract mandates 100% Performance and Labor and Material bonding. This engagement falls under NAICS code 532490 and is managed through the Philadelphia Gas Works procurement process.
Other Commercial and Industrial Machinery and Equipment Rental and Leasing

POSTED

6 days ago

DEADLINE

in 8 days
View Details
NAICS: 532490
New
SLED
Heavy Earthmoving Equipment RentalThis subcontract for Heavy Earthmoving Equipment Rental supports prime contractors on Philadelphia Gas Works operations projects. The scope of work involves the supply and rental of dump trucks, gradalls, backhoes, and loaders on daily, weekly, or monthly terms, with a requirement for 24-hour fulfillment. The provider is responsible for delivering operational equipment and performing all preventative maintenance on-site at no additional cost. Compliance with the Pennsylvania Prevailing Wage Act is mandatory, and the contractor must provide 100 percent Performance and Labor and Material bonding. The solicitation was posted on October 9, 2026, with a response deadline of October 23, 2026.
Other Commercial and Industrial Machinery and Equipment Rental and Leasing

POSTED

6 days ago

DEADLINE

in 8 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS