Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Vulnerability and Security Assessment Services

Active

State & Local

Response Deadline12/30/2030, 08:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Vulnerability and Security Assessment Services subcontract involves performing detailed analysis and assessments of information systems for prime contractors working on City of Seattle projects. The scope of work includes conducting application code reviews, penetration testing, network and application vulnerability scanning, digital investigations, and forensic analysis using specialized scanning tools and forensic software. The primary deliverables for this engagement are comprehensive vulnerability assessment reports and detailed forensic findings. To qualify for this opportunity, providers must demonstrate their expertise by completing three similar projects and passing required City background checks. This subcontract is listed under NAICS code 541519 and is managed through the City Consultant Roster in Washington. Interested parties should note the response deadline of December 30, 2030.

General Info

Subcontract for City of Seattle security assessments, penetration testing, and forensic analysis services.

Agency

Washington → City Consultant Roster

NAICS

541519 - Other Computer Related Services

Place of Performance

WA, USA

Set-Aside

NONE

Documents

This scope was carved out of CTY-CR-2025-01.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

CITYWIDE CONSULTANT ROSTER SOLICITATION: Information Technology Consulting (Small Businesses Only)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedJan 6

subcontract

Response DeadlineDec 30

Submission deadline

Response Deadline

12/30/2030, 08:00:00 PM UTCin about 4 years

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyWashington → City Consultant Roster

ContactsNo contacts available

OfficeN/A

Organization / AgencyWashington → City Consultant Roster

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs analysis and assessment of information systems for prime contractors on City of Seattle projects. Conducts application code reviews, application penetration testing, network and application vulnerability scanning, digital investigations, and forensic analysis. Utilizes vulnerability scanning tools and digital forensic software. Requires completion of three similar projects and City background checks. Delivers vulnerability assessment reports and forensic findings.

Similar Contracts

Same NAICS industry code

Digital Accessibility Audit Service

Solicitation # 26-44

The County of Stearns, Minnesota, is soliciting proposals for project 26-44 to obtain comprehensive digital accessibility audit services. The selected vendor will be responsible for auditing County-owned websites and applications to ensure full compliance with the Americans with Disabilities Act ADA Title II requirements and the Web Content Accessibility Guidelines WCAG 2.1 Level AA. Interested vendors must submit electronic proposals through the Bids and Tenders platform by 11:00 AM on Thursday, November 19, 2026, as hardcopy submissions are not permitted. Proposals must remain valid until January 31, 2027. The procurement process is managed by Jennifer Butkowski, Procurement and Contract Specialist, and the County reserves the right to reject any or all proposals or award the contract in whole or in part based on the best interests of the County.

County of Stearns

POSTED

about 14 hours ago

DEADLINE

Gmetrix Platform Technical Support ServicesThe Gmetrix Platform Technical Support Services subcontract involves providing technical administration and user support for the Gmetrix testing environment used by prime contractors on Alabama State Department of Education CTE projects. The selected provider will be responsible for managing account creation and password resets, ensuring platform uptime and hardware compatibility, and delivering technical troubleshooting for 500 licensed users. To qualify for this role, the provider must hold a technical certification in Gmetrix or a comparable platform administration certification. This engagement falls under NAICS code 541519 and is managed through the Alabama State Department of Education, CTE and Workforce Development.

Alabama State Department of Education, CTE \ Workforce Development

POSTED

about 14 hours ago

DEADLINE

AI-Driven Email Threat Detection and Web-Browser Protection SaaSThis subcontract provides a cloud-delivered SaaS platform designed for prime contractors on MPTAP projects for Hattiesburg Clinic, P.A. The solution focuses on advanced security through AI and ML detection to combat business email compromise, impersonation, and QR-code phishing via Microsoft 365 API integration. Additionally, the contract includes the deployment of centrally managed browser extensions to protect against credential harvesting. The provider is required to maintain SOC 2 Type II compliance and execute a HIPAA Business Associate Agreement. Key deliverables include an activated subscription, a fully integrated API connection, and the provision of monthly threat reports. The project falls under NAICS code 541519 and is associated with the state of Mississippi.

POSTED

about 16 hours ago

DEADLINE

Recovery Validation and Clean-Room Testing ServicesThe Recovery Validation and Clean-Room Testing Services subcontract involves providing technical validation and clean-room scanning for prime contractors on MPTAP EHR projects. The selected provider will manage a clean-room recovery environment to conduct full recovery tests and scan restored systems for ransomware or other anomalies prior to their return to production. This process requires the use of sandbox environments and specialized malware scanning tools. Due to the nature of the work, strict adherence to HIPAA compliance and the execution of a Business Associate Agreement are mandatory. Key deliverables include initial full recovery test reports and ongoing periodic validation reports. This opportunity is categorized under NAICS code 541519 and is associated with the state of Mississippi.

POSTED

about 16 hours ago

DEADLINE

Hardware Support and Endpoint Security Subscription ProviderThis subcontract opportunity is for a Hardware Support and Endpoint Security Subscription Provider to support prime contractors working on Maryland Health Services Cost Review Commission projects. The selected provider will be responsible for delivering active service contracts and license activations, specifically providing three years of Dell ProSupport Plus featuring next business day onsite service, 24/7 technical support, and accidental damage coverage, alongside five years of Absolute Resilience licenses. Qualified bidders must possess the necessary authorization to sell and activate both Dell and Absolute licenses. The solicitation was posted on October 30, 2026, with a response deadline of November 16, 2026. This requirement falls under NAICS code 541519 and is managed through the state of Maryland.

POSTED

about 16 hours ago

DEADLINE

GeoCortex Software Maintenance and SupportThis subcontract opportunity with Snohomish County in Washington focuses on providing software maintenance and technical support for GIS projects. The selected vendor will be responsible for maintaining existing GeoCortex software licenses to ensure overall system stability and continuous operation. To be eligible, the contractor must be an Original Equipment Manufacturer or an authorized provider of VertiGIS/GeoCortex software. The primary objective of the contract is to guarantee the ongoing validity of software licenses and the availability of professional technical support. Interested parties should note that the response deadline is November 17, 2026, and the work falls under NAICS code 541519.

Snohomish County

POSTED

about 18 hours ago

DEADLINE

Software, VertiGiS Geocortex Maintenance & Support

Solicitation # SS-26-0864AD

Snohomish County has issued a Notice of Intent for a sole source procurement under solicitation number SS-26-0864AD to obtain software maintenance and support for its existing GeoCortex software from VertiGIS North America, LTD. The county has utilized this software since 2010 and seeks to maintain existing licenses to ensure continued system functionality. The estimated cost for the first year of service is 12,000 USD, with a total estimated value of 65,000 USD over a five-year period of performance. Although this is intended as a sole source procurement and not a request for competitive bids, interested parties may submit a statement of capability and interest to determine if competitive procurement is necessary. Submissions must include the firm name, point of contact information, and a description of the firm's ability to provide the required functionality and integration. All statements of interest must be submitted via email with the solicitation number in the subject line no later than November 17, 2026, at 1:00 pm Pacific local time.

Snohomish County

POSTED

about 18 hours ago

DEADLINE

Online Manual Technical Support & MaintenanceThe Online Manual Technical Support and Maintenance subcontract involves providing specialized technical services for Lincolnshire County Council safeguarding projects. The scope of work includes performing system auditing, network integration, and help desk support for prime contractors. Key responsibilities center on managing network connectivity across multi-agency partners through the use of ticketing systems and diagnostic tools, while ensuring operational stability via regular data backups and the delivery of system uptime reports. All services must be executed in accordance with ITIL service management standards to maintain high quality and consistency. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 20, 2026.

Lincolnshire County Council

POSTED

about 19 hours ago

DEADLINE

Healthcare Cybersecurity AuditorThe Healthcare Cybersecurity Auditor subcontract for the University of Michigan involves performing critical security validation and privacy impact assessments for prime contractors on healthcare projects. The scope of work includes auditing physical security safeguards, validating cloud segmentation, and reviewing encryption methods to ensure full HIPAA compliance. Additionally, the contractor is responsible for completing HECVAT v4+ submissions and delivering a comprehensive security assessment report along with a risk mitigation plan. This opportunity is categorized under NAICS code 541519 and was posted on October 30, 2026. Interested parties must submit their responses by the deadline of December 30, 2026. Further details and submission processes can be accessed through the University of Michigan's procurement portal.

University of Michigan

POSTED

about 20 hours ago

DEADLINE

IT Security and Compliance MonitoringThe IT Security and Compliance Monitoring subcontract focuses on maintaining the integrity and regulatory adherence of technology systems for prime contractors supporting the NASA Goddard Space Flight Center in Greenbelt, Maryland. The scope of work involves the implementation of Cyber Supply Chain Risk Management plans, the secure management of Controlled Unclassified Information, and the execution of rigorous security audits in accordance with NPR 2810.1F and NIST SP-500 series standards. The selected provider will be responsible for delivering comprehensive security compliance reports and developing strategic risk mitigation plans to protect critical infrastructure. This opportunity falls under NAICS code 541519, with a response deadline set for November 13, 2026.

NASA Goddard Space Flight Center

POSTED

about 22 hours ago

DEADLINE

Corporate 1000 Card Format ProgrammingThis small business set-aside subcontract involves specialized programming of 10,000 Corporate 1000 card formats for prime contractors supporting the NASA Shared Services Center. The project requires the delivery of programmed units that maintain serialized numbering sequences and adhere to specific site identification requirements established by the Langley Research Center in Hampton, Virginia. To execute this work, the contractor must possess manufacturer authorization and utilize proprietary programming tools from HID Global. The contract falls under NAICS code 541519 and is managed through the National Aeronautics And Space Administration.

NASA Shared Services Center

POSTED

about 22 hours ago

DEADLINE

Cybersecurity Implementation and Authorization (A&A)The Cybersecurity Implementation and Authorization (A&A) subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on providing security engineering and authorization support to help prime contractors achieve Authority to Operate (ATO). The scope of work includes executing A&A processes in accordance with VA Handbook 6500, implementing CUI labeling for RM-MKR, and deploying critical security frameworks such as Zero Trust and FICAM controls. Technical requirements involve the use of SAML, PIV Logical Access, and IPv6 to ensure robust network security and access management. Compliance is a central component of the contract, requiring strict adherence to FIPS 199, FIPS 200, and HIPAA standards. The selected provider will be responsible for delivering essential CUI Implementation Plans and A&A Governance Documentation. This effort falls under NAICS code 541519 and is designed to strengthen the cybersecurity posture of VA projects through rigorous engineering and regulatory alignment.

Technology Acquisition Center Nj (36C10B)

POSTED

about 22 hours ago

DEADLINE

More opportunities from Washington → City Consultant Roster

Same awarding agency

PCI-DSS Compliance ConsultingThis subcontract opportunity involves providing PCI-DSS compliance consulting services for prime contractors working on City of Seattle projects. The selected provider will be responsible for analyzing and evaluating business processes and information systems to ensure they meet Payment Card Industry Data Security Standards. Key deliverables include the development of compliance frameworks, the identification of security gaps, the creation of remediation roadmaps, and the delivery of Attestations of Compliance. To be eligible, the contractor must hold a certification as a PCI Qualified Security Assessor or be a Qualified Security Assessor Company. This engagement falls under NAICS code 541611 and is managed through the City Consultant Roster in Washington. The solicitation was posted on January 6, 2026, with a response deadline extending to December 30, 2030.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 4 years

CITYWIDE CONSULTANT ROSTER SOLICITATION: Information Technology Consulting (Small Businesses Only)

Solicitation # CTY-CR-2025-01

The City of Seattle is establishing a qualified consultant roster for Information Technology Consulting under solicitation CTY-CR-2025-01, specifically restricted to small businesses. This roster allows City departments to contract for specialized IT services—including external project quality assurance, vulnerability and security analysis, telecommunications, and general computer systems analysis—without a formal advertised competitive process for individual assignments estimated below $420,000. To be approved for the roster, consultants must demonstrate the completion of at least three relevant projects, possess all necessary professional licenses and certifications, and maintain a Washington State business license. Approval to the roster does not guarantee a contract; instead, the City may select firms through informal solicitations to the full roster, a subset of the roster, or via direct selection. The agreement incorporates FAR Part 31 for lump-sum payments based on cost to complete the scope of work and requires compliance with federal debarment verification via SAM.gov. Key administrative requirements include a thirty-day payment term from receipt of invoice and adherence to City ordinances regarding paid sick and safe time, non-discrimination, and WMBE inclusion. Consultants must also comply with ADA Title II and the Washington Law Against Discrimination. Required documentation for the agreement includes a consultant questionnaire for contracts exceeding $10,000, insurance certifications, and potentially a non-disclosure agreement. Responses must be submitted electronically via the City's procurement portal by December 30, 2030.

Computer Systems Design Services

POSTED

DEADLINE

in about 4 years

Natural Resource & Wildlife ConsultingThis subcontract for Natural Resource and Wildlife Consulting involves performing environmental studies and assessments for prime contractors on projects within the City Consultant Roster in Washington. The scope of work includes conducting fisheries and wildlife field sampling, developing Habitat Conservation Plans, performing Endangered Species Act assessments, and executing wetlands delineation utilizing GPS and GIS mapping tools. Qualified providers must hold professional biologist or ecologist certifications to deliver essential environmental impact reports, delineation maps, and assessment documents. The contract is categorized under NAICS code 541620 and remains open for responses until December 30, 2030.

Environmental Consulting Services

POSTED

DEADLINE

in about 4 years

Environmental Expert Witness ServicesThis subcontract for Environmental Expert Witness Services involves providing professional opinions and expert testimony for environmental and conservation legal matters. Working under prime contractors on City Consultant Roster projects in Washington, the selected provider will review technical documents for legal proceedings and deliver formal expert witness reports. The role requires Subject Matter Expert status in specific environmental fields to ensure qualified representation during court appearances and hearings. This opportunity is categorized under NAICS code 541620 and remains open for responses until December 30, 2030.

Environmental Consulting Services

POSTED

DEADLINE

in about 4 years

Commercial Diving ServicesThis subcontract for Commercial Diving Services involves performing underwater inspections, maintenance, and sampling for prime contractors operating on City Consultant Roster projects in Washington. The scope of work requires the execution of diving operations utilizing commercial diving gear and underwater cameras, with a primary focus on delivering detailed inspection reports and completing specified maintenance tasks. To be eligible for this role, personnel must hold a Commercial Diver Certification from the ADCI or an equivalent recognized body. The contract falls under NAICS code 238910 and remains open for responses until December 30, 2030.

Site Preparation Contractors

POSTED

DEADLINE

in about 4 years

Sustainability & Green Building ConsultingThis subcontract for Sustainability and Green Building Consulting supports prime contractors on projects within the City Consultant Roster in Washington. The selected consultant will provide specialized expertise in recycling, sustainability, and sustainable building design, utilizing energy modeling software to perform building commissioning, sustainable planning, and recycling data collection. Key deliverables include comprehensive commissioning reports, sustainable design plans, and detailed sustainability strategy documents. To qualify for this engagement, consultants must hold a LEED AP or an equivalent green building certification. The contract is categorized under NAICS code 541620 and remains open for responses until December 30, 2030.

Environmental Consulting Services

POSTED

DEADLINE

in about 4 years

Water Quality & Conservation ServicesThe Water Quality and Conservation Services subcontract involves providing specialized research, audits, and engineering support for prime contractors operating under the City Consultant Roster in Washington. The scope of work focuses on water conservation and quality protection, utilizing chemical analysis laboratory equipment and modeling software to conduct pollution prevention and water quality monitoring. Key deliverables include the production of water quality reports, conservation audits, and detailed engineering specifications. Because the contract involves design work, a Professional Engineer license is required. This opportunity is categorized under NAICS code 541330 and remains open for responses until December 30, 2030.

Engineering Services

POSTED

DEADLINE

in about 4 years

CITYWIDE CONSULTANT ROSTER SOLICITATION: Communications Consulting (Small Businesses Only)

Solicitation # CTY-CR-2025-03

POSTED

DEADLINE

in about 4 years

Police Support Services and Law Enforcement TrainerThis subcontract for Police Support Services and Law Enforcement Trainer provides specialized professional services and tactical training for prime contractors working on City of Seattle police operations projects. The scope of work includes delivering expert training in crisis intervention, explosives, breaching, and tactical operations, while requiring all trainers to hold necessary law enforcement certifications. Beyond training, the contract encompasses police staffing and criminal intelligence analysis utilizing crime data software, as well as the provision of forensic services and composite sketch artistry. The service provider is responsible for delivering comprehensive staffing reports and training certifications to ensure operational compliance.

Professional and Management Development Training

POSTED

DEADLINE

in about 4 years

Physical Security and Access Control ConsultantThis subcontract opportunity is for a Physical Security and Access Control Consultant to provide specialized vulnerability analysis and security assessments for prime contractors working on City of Seattle public safety projects. The selected consultant will be responsible for conducting physical site surveys and electronic infrastructure audits, analyzing existing security policies, and prioritizing necessary risk mitigation improvements. To execute these tasks, the consultant will utilize security audit software and Physical Access Control System analysis tools. The primary deliverables for this engagement include detailed vulnerability assessment reports and formal proposals for security system upgrades. This role falls under NAICS code 541690 and is managed through the City Consultant Roster in Washington. Interested parties can find further details via the provided procurement portal link.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

in about 4 years

Emergency Management and Disaster Planning ConsultantThe Emergency Management and Disaster Planning Consultant subcontract provides professional services focused on disaster preparation, mitigation, response, and recovery for prime contractors working on City of Seattle public safety projects. The scope of work includes conducting threat assessments, developing Continuity of Operations plans, and planning emergency shelter operations. Additionally, the consultant is responsible for designing and executing tabletop and field training exercises, performing gap analyses, and utilizing hazard mapping tools and emergency management software to deliver comprehensive disaster plans and after-action reports. This opportunity is listed under NAICS code 541690 and is associated with the City Consultant Roster in Washington. The contract was posted on December 5, 2025, with a response deadline extending to December 30, 2030. Interested parties can find further details through the City of Seattle procurement portal.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

in about 4 years

Accessibility Construction Observer/AdministratorThe Accessibility Construction Observer/Administrator subcontract involves providing specialized oversight and verification for City of Seattle facility projects. The primary objective is to ensure that prime contractors implement accessibility requirements exactly as designed, specifically focusing on ADA compliance during the construction phase. Key responsibilities include conducting site observation visits, performing construction contract administration, and verifying that all installed accessibility features align with the approved project plans. The selected provider is responsible for delivering detailed construction observation reports and a final compliance verification to confirm all standards have been met. This opportunity is listed under NAICS code 541330 and is managed through the City Consultant Roster in Washington. The contract remains open for responses until December 30, 2030.

Engineering Services

POSTED

DEADLINE

in about 4 years

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS