Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, September 30 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Vulnerability Testing and Penetration Services

Active

State & Local

Response Deadline10/02/2026, 05:30:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for Vulnerability Testing and Penetration Services supports prime contractors working on projects for the Commonwealth of Kentucky Office for Technology. The scope of work involves performing comprehensive security audits and penetration testing, which includes inspecting website and application code for vulnerabilities. Highly skilled cybersecurity analysts are required to conduct active testing using specialized tools such as Tenable Nessus, OpenText Fortify, OpenText Fortify WebInspect, and Rapid7 App Spider to deliver detailed vulnerability reports and testing results. The opportunity is listed under NAICS code 541519 and is associated with the Kentucky Office of the Secretary. Interested parties must adhere to the response deadline of October 2, 2026. Further details and application processes are managed through the Kentucky vendor services portal.

General Info

Cybersecurity subcontract for Kentucky Office for Technology vulnerability testing and penetration services.

Agency

Kentucky → Fin - Office of the Secretary

NAICS

541519 - Other Computer Related Services

Place of Performance

Other, KY, USA

Set-Aside

NONE

Documents

This scope was carved out of RFB 758 2700000066.

The full solicitation package (16 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

RFB-758-2700000066-4 | Network Security Software, Hardware, and Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedSep 23

subcontract

Response DeadlineOct 2

Submission deadline

Response Deadline

10/02/2026, 05:30:00 PM UTCin 6 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyKentucky → Fin - Office of the Secretary

ContactsNo contacts available

OfficeN/A

Organization / AgencyKentucky → Fin - Office of the Secretary

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs security audits and penetration testing for prime contractors on Commonwealth of Kentucky Office for Technology projects. Inspects website and application code for vulnerabilities and conducts active penetration testing using Tenable Nessus, OpenText Fortify, OpenText Fortify WebInspect, and Rapid7 App Spider. Requires highly skilled cybersecurity analysts. Delivers detailed vulnerability reports and penetration testing results.

Similar Contracts

Same NAICS industry code

RFB-IS-27200212 - 15759P-DSB/SDN - F5 LOAD BALANCER RENEWAL (MDC) - Closing: 10/9/2026 12:00 PM

Solicitation # 232231

This solicitation, identified as RFB-IS-27200212 and solicitation number 232231, is issued by Los Angeles County in California for the renewal of F5 Load Balancer services for the MDC. The project is categorized as a solicitation under the SLED organization type, with the place of performance located in Los Angeles, California. The response deadline for this opportunity is October 9, 2026, at 7:00 PM. Interested parties can contact Roberto Zamorano for further information via email at rzamorano@isd.lacounty.gov or by phone at 323-443-8711. Detailed information regarding the opportunity is available through the provided official procurement link.

Los Angeles County

POSTED

about 16 hours ago

DEADLINE

Independent LIMS Security AssessorThis subcontract opportunity with the City of London requires an accredited independent security assessor to perform security assessments and validations of LIMS software for prime contractors on SaaS projects. The selected provider will be responsible for reviewing web applications against OWASP ASVS v3.0.x Level 2 controls, conducting security scans of public-facing components, and identifying potential vulnerabilities. The primary deliverables include detailed security assessment reports, OWASP control validations, and formal attestation documentation. Interested parties must submit their responses by October 23, 2026, under NAICS code 541519.

POSTED

DEADLINE

Genetec Security System Integration and MaintenanceThe Genetec Security System Integration and Maintenance subcontract involves providing software support, preventative maintenance, and authorized integration for security system and communications infrastructure projects. The contractor is responsible for integrating network hardware and security cameras into the Genetec platform, which requires the provider to maintain official Genetec-certified integrator status. Key deliverables include the maintenance of system functionality and the submission of annual maintenance reports. This opportunity is associated with the Ohio Communications, Training, Safety, and Risk agency under NAICS code 541519, with a response deadline of October 27, 2026.

Communications/Training/Safety/Risk

POSTED

DEADLINE

in about 1 month

Technical Support & Help Desk ServicesThe Technical Support and Help Desk Services subcontract for the Alabama Pesticide Management agency involves managing a customer-facing help desk dedicated to prime contractors working on state agriculture projects. The scope of work includes maintaining an online submission portal to facilitate the intake, logging, and tracking of software issues. To ensure high-quality service, the provider must follow ITIL standards for incident management, which includes generating Incident Reports and managing Incident Resolution Reports specifically for high-impact events through a formal ticketing system. Administrative requirements for this contract include the regular delivery of tracking logs and monthly statements detailing support hours. This subcontract falls under NAICS code 541519 and is managed through the Alabama Department of Agriculture. Interested parties must adhere to the submission deadline of September 29, 2026, to be considered for this technical support role.

Pesticide Management

POSTED

DEADLINE

Pesticide MGT/Plant AgEnterprise Software Program

Solicitation # SRC0000036670

Pesticide Management

POSTED

DEADLINE

NIST SP 800-171 Compliance ImplementationThis subcontract for the Department of Defense Land Supply Chain focuses on providing cybersecurity auditing and system hardening for prime contractors. The primary objective is to implement security controls in accordance with NIST SP 800-171 Rev 1, which includes developing detailed network diagrams and preparing System Security Plan documentation. The selected provider will conduct assessments to generate compliance scores and create Plans of Action and Milestones to address security gaps. Final deliverables include the completed System Security Plan, the official NIST assessment score, and specific implementation target dates. The work is performed in New Cumberland, Pennsylvania, under NAICS code 541519, with a response deadline of September 30, 2026.

LAND SUPPLY CHAIN

POSTED

DEADLINE

Data Center Remote Hands / Smart Hands SupportThis subcontract for Humble Independent School District involves providing on-site technical support and physical equipment management for prime contractors. The scope of work includes 24/7 facility monitoring and Smart Hands services, such as hardware installation, cable swapping, and server reboots, utilizing DCIM monitoring tools. The provider is responsible for delivering ongoing operational support and detailed incident response reports. Qualified personnel must hold BICSI or CompTIA Server+ certifications to perform these services. The opportunity was posted on September 25, 2026, with a response deadline of October 26, 2026. This project falls under NAICS code 541519 and is focused on maintaining critical data center infrastructure within the district.

POSTED

DEADLINE

Microsoft SQL Server and CALs SupplierThis subcontract involves the supply of genuine software licenses for prime contractors working on projects for the Passport Immigration and Citizenship Agency under the Government of Jamaica. The supplier is responsible for providing valid license keys and entitlement documentation for Microsoft SQL Server Standard Edition 2025 and its associated Client Access Licenses. To ensure the authenticity of the software, the supplier must maintain status as an authorized Microsoft reseller or partner. The contract is categorized under NAICS code 541519 and was posted on September 25, 2026.

Passport Immigration and Citizenship Agency

POSTED

DEADLINE

Pre-Qualification for Application Support Services – Infor FSM

Solicitation # 234421

TransLink, the South Coast British Columbia Transportation Authority, is seeking pre-qualified providers for Application Support Services specifically for Infor FSM. This solicitation, identified by number 234421, is managed through the Province of British Columbia and is intended for performance within British Columbia. Interested parties must submit their responses by the deadline of October 21, 2026, at 9:00 PM. The opportunity was officially posted on September 25, 2026, and further details regarding the application process can be accessed via the BC Bid portal.

TransLink(South Coast British Columbia Transportation Authority)

POSTED

DEADLINE

Pre-Qualification for Application Support Services - Octave Attune EAM

Solicitation # 234420

TransLink, the South Coast British Columbia Transportation Authority, is seeking pre-qualified providers for application support services specifically for Octave Attune EAM. This solicitation, identified by number 234420, is open to organizations capable of providing technical expertise and support for the specified enterprise asset management system within the province of British Columbia. Interested parties must submit their responses by the deadline of October 21, 2026, at 9:00 PM. The solicitation was officially posted on September 25, 2026, and further details regarding the application process can be accessed through the BC Bid portal.

TransLink(South Coast British Columbia Transportation Authority)

POSTED

DEADLINE

CJIS Compliance and Cybersecurity ConsultantThis subcontract opportunity for the City of Mulberry, Georgia, seeks a CJIS Compliance and Cybersecurity Consultant to establish a comprehensive security framework for a new law enforcement agency. The selected contractor will be responsible for developing a detailed compliance path that ensures all federal and state data security standards are met, requiring specialized expertise in Criminal Justice Information Services security policies. The primary objective is to deliver a defined cybersecurity strategy and compliance roadmap integrated into a final report. Interested parties must submit their responses by October 16, 2026, under NAICS code 541519.

City of Mulberry

POSTED

DEADLINE

Ongoing Technical Support & MaintenanceThis subcontract for Ontario Health involves providing comprehensive technical support and administrative maintenance for prime contractors. The scope of work includes Tier 1-3 help desk support, uptime monitoring, software patch application, and the execution of quarterly business reviews. To ensure quality and standardization, the provider must hold ITIL certification and utilize a professional ticketing system to manage and resolve support requests. Performance is measured through the delivery of monthly SLA reports and the successful resolution of support tickets. The opportunity was posted on September 25, 2026, with a response deadline of October 26, 2026. This engagement falls under NAICS code 541519 and is managed by the Government of Ontario.

POSTED

DEADLINE

More opportunities from Kentucky → Fin - Office of the Secretary

Same awarding agency

Janitorial Supplies and Consumables ProviderThis subcontract for Janitorial Supplies and Consumables Provider supports prime contractors on Commonwealth Office of Technology facility projects within Kentucky. The provider is responsible for delivering essential paper products, including 2-ply toilet paper and paper towels, as well as hand soap, window cleaners, and disinfectants that are compatible with existing facility dispensers. To ensure safety and compliance, the provider must supply current Material Safety Data Sheets and maintain proper labeling on all chemical containers. The contract emphasizes the importance of timely shipments to maintain consistent inventory levels. The solicitation was posted on September 24, 2026, with a response deadline of October 2, 2026, under NAICS code 423840.

Industrial Supplies Merchant Wholesalers

POSTED

DEADLINE

Facility Janitorial Services (Full Service)This subcontract for Facility Janitorial Services involves providing comprehensive cleaning and custodial maintenance for prime contractors at Commonwealth Office of Technology facility projects in Frankfort, Kentucky. The scope of work includes a tiered maintenance schedule featuring daily sanitization of sinks and dispensers, weekly tile buffing and high-dusting, monthly blind cleaning, and quarterly carpet extraction. To ensure quality and safety, the provider must utilize commercial-grade equipment and provide Material Safety Data Sheets for all chemicals used. The performance of the contract is verified through bi-monthly inspection reports to ensure the facility remains clean. This opportunity falls under NAICS code 561720 and is associated with the Kentucky Office of the Secretary. Interested parties must adhere to the response deadline of October 2, 2026.

Janitorial Services

POSTED

DEADLINE

RFB-758-2700000093-3 | Janitorial Services - Commonwealth Office of Technology

Solicitation # RFB 758 2700000093

The Commonwealth of Kentucky, through the Finance and Administration Cabinet, is soliciting bids for janitorial and custodial services for the Commonwealth Office of Technology's Edge Network Services Branch located in Frankfort, Kentucky. The scope of work covers approximately 7,182 square feet, with routine services performed five nights per week from Monday through Friday. Additional requirements include semi-annual cleaning to be completed within the first 45 days of the contract and quarterly cleaning during the first month of each quarter. The contract will be awarded based on best value, with 90 points allocated to the lowest price and 10 points awarded based on the number of years in business. To be considered responsive, vendors must have a minimum of three years of experience in the janitorial or janitorial management industry. The selected vendor must employ direct employees only, as subcontracting is prohibited. All personnel must be at least 18 years old, pass annual criminal background checks, and sign a Statement of Confidentiality. The vendor is responsible for maintaining Material Safety Data Sheets for all chemicals used, ensuring all containers are properly labeled, and posting cleaning schedules and sign-in sheets in the service closet. Performance will be monitored through routine agency inspections and mandatory bi-monthly on-site visits by the vendor. The contract includes strict compliance with Kentucky Revised Statutes regarding taxes, wages, and safety, as well as prohibitions against certain boycotts and lobbying violations. Bids must be submitted electronically via the eProcurement system by the deadline of October 2, 2026.

Janitorial Services

POSTED

DEADLINE

Data Encryption and SMTP Security ServicesThis subcontract for Data Encryption and SMTP Security Services supports the Commonwealth of Kentucky Office for Technology by implementing and managing encryption and email security for prime contractors. The scope of work involves securing data at rest and in motion utilizing Certes and Certes Trustnet Manager, while managing email infrastructure and routing through Microsoft Exchange and Proofpoint, including the setup of SMTP relays. The project requires specialized expertise in Public Key Infrastructure and secure email routing to deliver a fully encrypted data environment and a secure email system. This opportunity is categorized under NAICS code 541512 and is managed by the Kentucky Office of the Secretary, with a response deadline of October 2, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Network Security Software Licensing and ImplementationThis subcontract for Network Security Software Licensing and Implementation supports prime contractors on Commonwealth of Kentucky Office for Technology projects. The scope of work involves the supply and implementation of a comprehensive security software suite, including firewall software, AlgoSec Rule Base Analysis tools, Forcepoint Web Gateways, and Symantec Endpoint Security. Additionally, the contract covers the management of Two-Factor Authentication systems using Symantec VIP, Microsoft, and RSA, as well as SSL certificate solutions through Microsoft PKI and DigiCert. The primary objective is to deliver a fully licensed and configured security software environment under NAICS code 541512 for the state of Kentucky.

Computer Systems Design Services

POSTED

DEADLINE

Network Security Hardware Deployment (Firewalls, UTM, IPS)This subcontract focuses on the supply and installation of physical security appliances for prime contractors working on projects for the Commonwealth of Kentucky Office for Technology. The scope of work includes the delivery and deployment of fully operational hardware infrastructure, specifically targeting firewalls, Unified Threat Management solutions, and Intrusion Protection Systems. The contractor will utilize industry leading brands such as Fortinet, Checkpoint, Palo Alto, Elastic, and TrendMicro, while also installing hardware for content caching, inspection, and filtering. The project is categorized under NAICS code 423430 and is managed by the Kentucky Office of the Secretary. Interested parties must adhere to the response deadline of October 2, 2026. The primary objective is to ensure that all physical security hardware is delivered and installed to a fully operational state to support the agency's network security requirements.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

RFB-758-2700000066-4 | Network Security Software, Hardware, and Services

Solicitation # RFB 758 2700000066

The Commonwealth of Kentucky is establishing a Master Agreement for network security software, hardware, and services to protect its network and server environments from unauthorized intrusion. This all-state agency contract encompasses a broad scope of deliverables, including firewall management, endpoint security, web gateways, SSL certificates, and the physical deployment and maintenance of firewall infrastructure, unified threat management, and intrusion protection systems. Vendors are required to provide full lifecycle management, including installation and hourly-based maintenance and support, while ensuring interoperability with KITS standards. The contract mandates strict data security protocols, requiring all Commonwealth data to remain within the contiguous United States, the use of NIST 800-53 moderate level controls, and encryption for sensitive data both in-transit and at rest. The solicitation follows a Best Value Ranking Approach for award, with scoring heavily weighted toward the highest minimum percentage discount off MSRP for software and the lowest fully loaded hourly rate for services. Bidders must submit responses electronically via the Kentucky eProcurement system, entering a nominal value of $.01 in the electronic unit price field and providing actual pricing on a separate bid sheet. Mandatory requirements for award include a notarized affidavit regarding campaign finance and resident status, proof of authorized reseller status from manufacturers or distributors, and compliance with various Kentucky Revised Statutes concerning tax and labor laws. The final response deadline was extended to October 2, 2026.

Computer Systems Design Services

POSTED

DEADLINE

External Independent Third-Party Reviewer (EITPR)The External Independent Third-Party Reviewer subcontract involves performing independent reviews of Medicaid provider requests and documentation for prime contractors supporting the Commonwealth of Kentucky Department of Medicaid Services. The selected provider will analyze provider data against state and federal Medicaid guidelines to verify the validity of claims, ensuring the delivery of completed review reports for fiscal years 2027 and 2028. A critical requirement of this engagement is the maintenance of strict independence, meaning the reviewer must have no financial or professional conflicts of interest. This opportunity was posted on September 21, 2026, with a response deadline of October 2, 2026, and falls under NAICS code 621999.

All Other Miscellaneous Ambulatory Health Care Services

POSTED

DEADLINE

RFI-758-2700000006-3 | RFI SAS Enterprise Financial Reporting Discovery

Solicitation # RFI 758 2700000006

The Commonwealth of Kentucky, through the Finance and Administration Cabinet and the Office of Statewide Accounting Services, has issued Request for Information (RFI) 758 2700000006 to identify solutions for replacing or enhancing the reporting component of its Enterprise Resource Planning (ERP) system. The primary objective is to discover modern reporting tools, dashboards, and data visualization solutions that are compatible with the state's Oracle database environment and Microsoft Government Community Cloud (GCC). The RFI seeks information on technical architecture, security models, and the ability to scale for over 4,000 users, as well as budgetary and timeline estimates for planning purposes. This is a discovery process and does not constitute a commitment to award a contract or a formal request for bids; consequently, vendors are explicitly instructed to abstain from providing formal quotes or bids in their responses. The RFI was issued on September 1, 2026, with a final response deadline of October 2, 2026. Interested vendors must submit written responses detailing their firm's qualifications and solution overviews. While this specific RFI is for information gathering, related procurement standards for the Commonwealth include requirements for cyber insurance or performance bonds, strict non-discrimination compliance, and adherence to specific electronic submission protocols via the Kentucky Vendor Self Service site.

Computer Systems Design Services

POSTED

DEADLINE

Janitorial Supplies and Chemical ProvisioningThis subcontract for Janitorial Supplies and Chemical Provisioning supports prime contractors working on Commonwealth Office of Technology projects in Frankfort, Kentucky. The scope of work involves the supply and delivery of cleaning agents, soaps, paper products, and trash liners, along with the necessary Material Safety Data Sheets for all chemical products. The provider must ensure that all supplied materials adhere to the minimum recycled content standards established under 200 KAR 5:330. This opportunity is managed by the Kentucky Office of the Secretary and falls under NAICS code 423850, with a response deadline of October 2, 2026.

Service Establishment Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Janitorial and Custodial ServicesThis subcontract for Janitorial and Custodial Services involves providing comprehensive cleaning for prime contractors at Commonwealth Office of Technology projects in Frankfort, Kentucky. The scope of work includes cleaning 7,182 square feet of office space, common areas, and mechanical rooms five nights per week. The contractor is responsible for supplying all necessary cleaning chemicals and maintaining up-to-date MSDS documentation to ensure a clean and well-maintained facility. To be eligible, providers must have a minimum of three years of business experience and strictly comply with 200 KAR 5:330 recycling requirements. This opportunity is categorized under NAICS code 561720 and is associated with the Kentucky Office of the Secretary. The response deadline for this solicitation is October 2, 2026.

Janitorial Services

POSTED

DEADLINE

RFB-758-2700000093-2 | Janitorial Services - Commonwealth Office of Technology

Solicitation # RFB 758 2700000093

The Commonwealth of Kentucky, through the Finance and Administration Cabinet, is soliciting bids for janitorial and custodial services for the Commonwealth Office of Technology's Edge Network Services Branch located in Frankfort, Kentucky. The scope of work covers approximately 7,182 square feet and requires cleaning services five nights per week, Monday through Friday. The contract includes specific requirements for quarterly and semi-annual cleaning, as well as floor maintenance such as spray buffing and strip, seal, and wax services. The award will be based on a best-value ranking approach, with 90 points weighted toward price and 10 points toward the vendor's years in business. To be considered responsive, vendors must have a minimum of three years in business and provide supporting verification documentation. The contract includes a potential initial period with four optional one-year renewal periods. Strict personnel requirements are in place, including mandatory yearly criminal background checks, signed confidentiality agreements for all staff, and a prohibition on subcontracted employees. Vendors must also provide Material Safety Data Sheets for all chemicals used and ensure all containers are properly labeled. Performance is monitored through bi-monthly on-site inspections and signed reports, with a requirement to correct minor deficiencies within 48 hours. Bids must be submitted electronically via the VSS portal by October 2, 2026, at 1:30 PM EST.

Janitorial Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS