On-site Vulnerability Assessment and Penetration Testing Services

The contract seeks qualified providers to perform regular on-site vulnerability assessments and penetration testing specifically on Tier 2 systems, with the goal of identifying, documenting, and verifying the remediation of security weaknesses. All work must adhere strictly to applicable government security standards, ensuring that identified risks are addressed in a timely and thorough manner to maintain system integrity and compliance. The services are classified as a subcontract under NAICS code 541690, indicating a focus on other scientific and technical consulting services, and are being issued by the Bureau of Industry and Security under the Department of Commerce. The solicitation was posted on May 4, 2026, with a firm response deadline of May 20, 2026, at 9:00 PM. While no specific location is provided for performance, the work is required to be conducted on-site, implying that contractors must be prepared to operate at government facilities or designated locations as directed. There is no set-aside designation, meaning the contract is open to all eligible entities regardless of size or ownership status. No point of contact information is listed, and further details are available through the provided SAM.gov link for interested parties.