Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →
CLEATUS
Get CLEATUS

Vulnerability Assessment and Penetration Testing (VAPT) Services

Active
International

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Vulnerability Assessment and Penetration Testing services supports prime contractors on projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. The selected provider will perform authorized vulnerability assessments and penetration tests on specified targets within the National Capital Region, adhering to strict Rules of Engagement. Key deliverables include Executive Technical Reports, Technical Findings Registers, and Remediation-Validation Reports, all featuring risk-ranked remediation plans supported by reproducible evidence. To qualify, the service provider must supply a TBIPS C.11 VA Specialist at Level 3 who holds professional certifications such as OSCP or GIAC. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026. The contract falls under NAICS code 541519 and focuses on enhancing the security posture of public safety infrastructure through rigorous technical testing and validation.

General Info

Vulnerability assessment and penetration testing services for Canada's Department of Public Safety.

Agency

Government of Canada → Department of Public Safety and Emergency Preparedness

NAICS

541519 - Other Computer Related Services

Place of Performance

National Capital Region (NCR), CAN

Set-Aside

NONE

Documents

This scope was carved out of 202703271.

The full solicitation package (1 document), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

IT Security Professional Services Under the Task-Based Services Supply Arrangement

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyGovernment of Canada → Department of Public Safety and Emergency Preparedness
ContactsNo contacts available
OfficeN/A
Organization / AgencyGovernment of Canada → Department of Public Safety and Emergency Preparedness
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Conducts authorized vulnerability assessments and penetration tests for prime contractors on Public Safety Canada projects. Defines Rules of Engagement, executes tests on named targets, and develops risk-ranked remediation plans with reproducible evidence. Requires TBIPS C.11 VA Specialist (Level 3) with OSCP or GIAC certifications. Delivers Executive Technical Reports, Technical Findings Registers, and Remediation-Validation Reports.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
SLED
Cybersecurity & System Hardening SpecialistThis subcontract opportunity for a Cybersecurity and System Hardening Specialist supports prime contractors on projects for the State Corporation Commission of Virginia. The scope of work focuses on security architecture design and system hardening, specifically through the implementation of identity security, endpoint protection, secure data transmission, and encryption of data at rest. The selected provider will be responsible for ensuring all systems meet SOC 2 or ISO 00 compliance standards and establishing robust audit logging. Key deliverables include a fully hardened system environment, detailed security configuration reports, and established encryption protocols. The project is categorized under NAICS code 541519 and allows for performance at the supplier's site. Interested parties must submit their responses by November 20, 2026.
State Corporation Commission

POSTED

about 16 hours ago

DEADLINE

in about 1 month
View Details
NAICS: 541519
New
SLED
SaaS Implementation and User Support ServicesThe SaaS Implementation and User Support Services subcontract focuses on providing technical onboarding, training, and continuous support for prime contractors working on software projects for the Teacher Retirement System of Texas. The scope of work includes account management, the creation of comprehensive training resources, and the delivery of technical troubleshooting and user access management. These tasks are to be executed using remote support tools and help desk software, with a preference for candidates holding ITIL certification. Key deliverables for this engagement include the successful onboarding of users, the production of training manuals, and the resolution of support tickets. The opportunity is categorized under NAICS code 541519 and is associated with the state of Texas. Interested parties should note the response deadline of November 18, 2026.
Teacher Retirement System of Texas

POSTED

about 18 hours ago

DEADLINE

in 28 days
View Details
NAICS: 541519
New
SLED
Premium Technical Support ProviderThis subcontract agreement establishes a partnership for premium technical support and hardware replacement services to assist prime contractors on network projects for Hattiesburg Clinic, P.A. The provider is responsible for maintaining 24x7 coverage, managing hardware replacement service level agreements, and providing dedicated engineering escalation paths. These operations are supported by the management of hardware replacement inventory and specialized logistics to ensure guaranteed response times. The contract requires a minimum commitment of three years to ensure ongoing stability and support. Administered under NAICS code 541519 and associated with MPTAP in Mississippi, the agreement focuses on delivering continuous technical reliability and rapid hardware restoration for critical network infrastructure.
MPTAP

POSTED

about 19 hours ago

DEADLINE

in 1 day
View Details
NAICS: 541519
New
SLED
CMS Support and Maintenance ServicesThe CMS Support and Maintenance Services subcontract, managed by Enterprise Technology Solutions for the state of California, focuses on providing continuous technical support and maintenance for CMS and hosted environments. The selected provider will be responsible for troubleshooting system issues, applying necessary software patches, and offering help desk assistance to CMS authors utilizing administrative tools. A primary objective of the contract is to ensure system stability and uptime in strict adherence to established service level agreements. Under NAICS code 541519, the contractor is required to deliver regular maintenance reports to document system health and performance. Interested parties must submit their responses by November 21, 2026, following the posting date of October 20, 2026. This engagement is specifically designed to support prime contractors working on Air District web property projects.
Enterprise Technology Solutions

POSTED

about 20 hours ago

DEADLINE

in about 1 month
View Details
NAICS: 541519
New
SLED
Cisco DNA and Smart Net Service AgreementsThis subcontract opportunity, issued by the Das500000 Office Of Information Technology Gsvc, seeks a qualified provider to deliver software licensing and extended service agreements for prime contractors on DAS Computer Services projects. The scope of work specifically requires the provisioning of three-year Cisco DNA Advantage term licenses and Cisco Smart Net Total Care extended service agreements, ensuring that active software licenses and service contract registrations are properly delivered. To be eligible, candidates must maintain authorized Cisco partner status with the demonstrated capability to provision both DNA and Smart Net services. Interested parties should note that the response deadline is October 28, 2026, and the requirement falls under NAICS code 541519.
Das500000 Office Of Information Technlgy Gsvc

POSTED

about 20 hours ago

DEADLINE

in 7 days
View Details
NAICS: 541519
New
SLED
AppEnhancer Software Support RenewalThis subcontract focuses on the annual software support and maintenance renewals for the AppEnhancer software suite, specifically serving prime contractors engaged in State of Alabama IT projects. The primary objective is to provide software maintenance licenses that guarantee uninterrupted access to technical support, patches, and original equipment manufacturer updates throughout the period of performance. To be eligible, providers must maintain E-Verify compliance and possess a valid Manufacturer's Reseller Authorization. The contract is categorized under NAICS code 541519 and is managed by the Alabama IT agency, with a response deadline set for October 23, 2026.
IT

POSTED

about 20 hours ago

DEADLINE

in 1 day
View Details
NAICS: 541519
New
SLED
AppEnhancer Support Renewal
Solicitation # SRC0000037235
Solicitation SRC0000037235 is a sole source purchase for the yearly AppEnhancer Support Renewal for the State of Alabama IT agency. The contract is governed by a Quick Quote Standard Boilerplate and is limited to a total cost of 25,000 dollars or a maximum duration of five years. The agreement allows for annual renewals by written consent of both parties, with approved price escalations capped at 5 percent of the annual contract cost, provided the total contract ceiling is not exceeded. The State of Alabama maintains the right to inspect all products after delivery in accordance with the Universal Commerce Code before final acceptance. Award evaluation is based on pricing, with the state reserving the right to analyze cost realism and price reasonableness. Additionally, the state may request proof of manufacturer reseller authorization, professional licenses, and insurance certificates. Suppliers must comply with several regulatory requirements, including E-Verify enrollment, registration with the Alabama Secretary of State for foreign entities, and certification of tax compliance and non-boycott activities. Payments must be accepted electronically via state-issued credit cards, P-cards, or EFT.
IT

POSTED

about 20 hours ago

DEADLINE

in 1 day
View Details
NAICS: 541519
New
International
Software Support ServicesThis subcontract for Software Support Services involves providing essential technical assistance, bug fixes, and system updates for prime contractors working on Herefordshire Council registration projects. The scope of work includes operating a technical help desk, applying software patches, and ensuring systems remain compliant with National Standards and evolving UK legislation through the use of version control systems and remote support tools. The primary objective is to ensure consistent system availability and the delivery of current software versions. Interested parties should note that the response deadline is November 13, 2026, with the project falling under NAICS code 541519.
Herefordshire Council

POSTED

about 21 hours ago

DEADLINE

in 23 days
View Details
NAICS: 541519
New
SLED
6891
Solicitation # 49641
The Massachusetts Port Authority, operating as Massport, has issued solicitation number 49641 for the Taegis MDR Renewal. This opportunity is open for responses until November 2, 2026, with the performance of services located within the state of Massachusetts. The award will be granted to the proposal deemed to be in the best interest of the Authority, rather than strictly to the lowest cost bidder. Proposers must provide detailed submissions that align with the Authority's evaluation criteria and are prohibited from altering any terms or conditions provided in the solicitation documents. Compliance with Massachusetts General Laws, specifically Chapter 268A regarding conflicts of interest, is mandatory. Proposers must disclose any potential conflicts and may be required to obtain opinions from the State Ethics Commission. Additionally, all information submitted in proposals is subject to the Massachusetts Public Records Law and is not considered proprietary or confidential. The successful contractor will be required to provide insurance coverage at their own expense as specified in the final agreement.
Massachusetts Port Authority - Goods & Services

POSTED

about 22 hours ago

DEADLINE

in 12 days
View Details
NAICS: 541519
New
SLED
ACCELQ AI Automation Platform License ProviderThis subcontract agreement establishes a provider for proprietary ACCELQ software licenses to support prime contractors working on State of Ohio administration projects. The scope of delivery includes four units of the Unified Codeless-AI Automation Platform for Web and API, the Enterprise Upgrade package, and the ACCELQ Salesforce LIVE Add-On Bundle supporting up to five users. The provider is responsible for delivering active software licenses and ensuring continuous access to the hosted platform. To be eligible for this contract, the provider must maintain authorized ACCELQ reseller status and hold a valid Ohio MBE certification. The opportunity is categorized under NAICS code 541519 and is managed by the State of Ohio. Interested parties must adhere to the timeline established by the posting date of October 20, 2026, with a response deadline of November 3, 2026.
Puc300000 Administration Puc4

POSTED

about 23 hours ago

DEADLINE

in 13 days
View Details
NAICS: 541519
New
Federal
Men & Mice Micetro IP Management RenewalThis subcontract, managed by the Department of Health and Human Services Omas Strategic Buying Center for Information Technology, focuses on the renewal of software licenses for the Men and Mice Micetro platform. The project supports prime contractors on NIAID IT projects by providing integrated management of IP Address Management and Dynamic Host Configuration Protocol services for approximately 23,000 IP addresses. The objective is to secure discounted open market pricing for these active license renewals to maintain critical network infrastructure. To be eligible, providers must hold authorized Men and Mice reseller status and ensure full compliance with FAR 52.240-90 and 52.240-91. The work is associated with NAICS code 541519 and will be performed in Bethesda. Interested parties should note the response deadline of October 26, 2026.
Omas Strategic Buying Center - Information Technology

POSTED

1 day ago

DEADLINE

in 5 days
View Details
NAICS: 541519
New
Federal
Data Integration Security and Authorization SupportThe Data Integration Security and Authorization Support subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on performing security assessments and managing authorization readiness for prime contractors on OIT projects. The scope of work includes conducting security audits, managing Authority to Operate documentation, and implementing privacy controls through the use of vulnerability scanners and GRC tools. All activities must comply with FedRAMP, NIST, and VA cybersecurity policies to ensure the delivery of comprehensive security assessment reports, ATO packages, and compliance certifications. This opportunity falls under NAICS code 541519, with a response deadline set for November 4, 2026.
Technology Acquisition Center Nj (36C10B)

POSTED

1 day ago

DEADLINE

in 14 days
View Details

More opportunities from Government of Canada → Department of Public Safety and Emergency Preparedness

Same awarding agency

NAICS: 541512
New
International
Cybersecurity Architecture and Design ServicesThis subcontract for Cybersecurity Architecture and Design Services supports prime contractors on projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. The scope of work involves producing security architectures and design-review deliverables, which include analyzing solution boundaries and data flows, performing threat modeling, and creating secure design patterns for network segmentation, identity, and access. Key deliverables for this engagement are Design Review Reports and Security Architecture Diagrams. Performance will take place in the National Capital Region. Qualified candidates must hold TBIPS C.7 Design Specialist Level 3 or C.8 Network Security Analyst Level 2 or 3 certifications, along with a CISSP or CISM designation. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026.
Computer Systems Design Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 541690
New
International
IT Security Assessment and Authorization (A&A) ServicesThis subcontract for IT Security Assessment and Authorization services supports the Department of Public Safety and Emergency Preparedness in the National Capital Region. The primary objective is to perform security assessments and manage the Authorization to Operate process for prime contractors on various IT projects. Key responsibilities include developing security assessment plans, conducting Threat and Risk Assessments, and creating control matrices and Plans of Action and Milestones. The contract requires specialized personnel categorized as TBIPS C.3 Analysts at Levels 2 and 3, who must hold professional certifications such as CISSP, CISM, CISA, CRISC, or CCSP. Deliverables for this engagement include complete ATO decision packages, Security Assessment Reports, and Residual Risk Summaries. The solicitation was posted on October 20, 2026, with a response deadline of November 23, 2026.
Other Scientific and Technical Consulting Services

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
New
International
IT Security Professional Services Under the Task-Based Services Supply Arrangement
Solicitation # 202703271
Public Safety Canada is soliciting task-based IT professional services under the Task-Based Informatics Professional Services Supply Arrangement to support security assessments, authorizations, architecture, testing, remediation validation, and incident readiness for departmental systems, cloud services, and networks. The scope includes delivering up to 30 Authorization to Operate packages, producing security architectures and design reviews, and performing vulnerability assessments and penetration testing. The contract is awarded based on a combined rating of 70 percent technical merit and 30 percent price, with a focus on the depth of experience in security controls and the breadth of accepted deliverables. The contract follows an as-and-when-requested structure using Task Authorizations to define specific scopes, schedules, and deliverables. The initial term runs from the date of award to March 31, 2027, with two irrevocable one-year extension options. Services are priced as all-inclusive per diem rates based on TBIPS categories, including IT Security TRA and C&A Analysts, Design Specialists, Network Security Analysts, and Incident Management Specialists. The contractor must maintain a valid organization security clearance, adhere to a strict non-disclosure agreement, and provide resources with industry-recognized certifications such as CISSP, CISM, or OSCP. Performance is measured against baseline criteria for completeness, accuracy, traceability, and timeliness, with Public Safety Canada serving as the final authority for the acceptance or rejection of deliverables.

POSTED

1 day ago

DEADLINE

in about 1 month
View Details
NAICS: 541611
New
International
IM/IT Research and Advisory Services for Public Safety Canada
Solicitation # 202701950
Public Safety Canada is soliciting proposals for IM/IT Research and Advisory Services to support its Digital Modernization and Public Safety Transformation Agenda. The objective is to secure subscription-based access to independent, evidence-based research, assessment tools, and advisory services focusing on artificial intelligence, cybersecurity, data management, and operational effectiveness. This opportunity is restricted to specific Supply Arrangement holders, including Forrester Research Limited, Info-Tech Research Group Inc., and Gartner Canada Co. The contract is for an initial term of one year with an option to extend for an additional year, for a maximum duration of two years. Services will be delivered via a secure online platform with a target uptime of 99 percent and a tiered support model catering to executive, management, and operational levels. Mandatory requirements for bidders include providing access to at least 150 full-time IT subject matter experts, maintaining independent and unbiased research, and demonstrating formal data protection policies. Award selection is based on the highest combined rating of technical merit, weighted at 80 percent, and financial price, weighted at 20 percent, with a minimum technical threshold of 70 percent required for consideration. The contractor must ensure that 80 percent of research content is less than 18 months old and acknowledge advisory requests within two business days. Key administrative requirements include the submission of a Quality Management Plan within 15 business days of award and adherence to the Privacy Act. Payments will be made via direct deposit within 30 days of receiving an undisputed invoice. There are no security requirements associated with this contract, and the contractor will retain intellectual property rights to foreground information.
Administrative Management and General Management Consulting Services

POSTED

1 day ago

DEADLINE

in 14 days
View Details
NAICS: 519290
New
International
IM/IT Content Development and CurationThis subcontract for IM/IT Content Development and Curation supports the Department of Public Safety and Emergency Preparedness within the National Capital Region. The selected provider will perform research and technical writing for prime contractors on digital domain projects, focusing on authoring new content and updating existing research on emerging technologies. To maintain data currency, all information must be less than 18 months old, with work managed through proprietary CMS and research databases. Qualified candidates must possess advanced degrees in Computer Science, Information Management, or Public Policy. Key deliverables include the production of research papers and the submission of quarterly content update reports. The solicitation was posted on October 15, 2026, with a response deadline of November 4, 2026.
Web Search Portals and All Other Information Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details
NAICS: 541513
New
International
Research Platform Availability and Technical SupportThis subcontract for Research Platform Availability and Technical Support involves providing technical infrastructure management for prime contractors working on Public Safety Canada research platforms. The service provider is responsible for maintaining a 99% platform uptime, managing scheduled maintenance, and resolving functionality or access issues through cloud hosting environments and ticketing systems. Adherence to ITIL or equivalent service management standards is required, with deliverables including detailed resolution logs and uptime reports. The contract is issued by the Department of Public Safety and Emergency Preparedness for the Government of Canada, with performance taking place in the National Capital Region. Interested parties must respond by November 4, 2026, regarding this opportunity which falls under NAICS code 541513.
Computer Facilities Management Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details
NAICS: 541611
New
International
Specialized Digital Transformation Advisory ServicesThe Specialized Digital Transformation Advisory Services subcontract supports prime contractors on digital modernization projects for the Government of Canada's Department of Public Safety and Emergency Preparedness. Based in the National Capital Region, the scope of work involves providing expert analysis on AI-driven solutions, conducting operational effectiveness diagnostics, and developing strategic risk mitigation plans focused on data management and cybersecurity. Qualified providers must hold industry-recognized certifications such as CISSP, CISM, or specialized credentials in AI and Data Management to deliver actionable advisory reports and strategic recommendations. The solicitation was posted on October 15, 2026, with a response deadline of November 4, 2026, falling under NAICS code 541611.
Administrative Management and General Management Consulting Services

POSTED

6 days ago

DEADLINE

in 14 days
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS