Mobile Application Security & Penetration Testing

The Drug Enforcement Administration, under the Department of Justice, is seeking a subcontractor to conduct comprehensive third-party cybersecurity assessments for a mobile application and associated backend APIs. The scope of work includes penetration testing, vulnerability scanning, and source code reviews designed to ensure alignment with federal security standards. These assessments are critical to identifying and mitigating potential security weaknesses across the application’s architecture, data handling, and communication protocols. The performance location is specified as Romulus, Michigan, with a zip code of 48174, and the work must comply with all applicable federal cybersecurity requirements. This solicitation is posted as a subcontract opportunity with a NAICS code of 541612, indicating it falls under the category of Computer Systems Design Services. The response deadline is August 19, 2026, at 4:00 PM Eastern Time, with the posting date listed as August 5, 2026. While specific details regarding award size, contract duration, or evaluation criteria are not provided, proposers must be prepared to demonstrate proven experience in federal cybersecurity engagements, particularly within the law enforcement or national security context. The absence of a set-aside designation suggests this opportunity is open to all qualified entities, and successful bidders will be expected to adhere to rigorous reporting and compliance standards throughout the assessment lifecycle.