- Country: USA
- Summary: NATO Business Opportunity: Web Asset Security Assessment Grey Box Web Penetration Testing
- UST Ref No: 126359879
- Deadline: 22 Sep 2025
- Financier: Self Financed
- Purchaser Ownership: Government
- Tender Value: Refer Document
- Notice Type: Tender
- Document Ref. No.: RFQ-CO-424225-PEN
- Purchaser's Detail:Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details. Login to see full purchaser details.
- Description:
- Description
The NATO Communications and Information Agency (NCIA) intends to issue a Request for Quotation (RFQ) for Web Asset Security Assessment Grey Box Web Penetration Testing.
Potential U.S. prime contractors must 1) maintain a professionally active facility (office, factory, laboratory, etc.) within the United States, 2) be pre-approved for participation in NATO International Competitive Bidding (ICB), 3) be issued a Declaration of Eligibility (DOE) by the Department of Commerce (DOC), and 4) register with the NCI Agency-s eProcurement tool, Neo: https://www.ncia.nato.int/business/procurement/neo-eprocurement
In addition, contractor personnel will be required to work unescorted in Class II Security areas. Therefore, access can only be permitted to cleared individuals. Only companies maintaining the appropriate personnel clearances will be able to perform the resulting contract.
The reference for the RFQ is RFQ-CO-424225-PEN and all correspondence concerning the RFQ should include this reference.
SUMMARY OF REQUIREMENTS
Please note that these requirements are being refined and will be included in further details as part of the RFQ.
Project Objective
To assess the security vulnerabilities and risks associated with NATO web assets. The security audit will be conducted using a greybox approach and following OWASP Application Security Verification Standard.
Scope of Work
1. Conduct manual penetration testing following a grey box approach for i) web assets exposed to the internet and ii) web assets not exposed to the internet.2. Assess the security vulnerabilities and risks associated with the web assets.3. Provide recommendations to mitigate the identified risks.
Period of Performance
A nine month basic period, followed by two 12-month optional periods. The basic period is anticipated to start in April 2025 and end on 31 December 2025. This timeline represents the anticipated duration of the project, and adjustments ... - Documents:
If you are registered member, kindly login to view full details of this tender notice:
CLICK HERE TO LOGINNATO Business Opportunity: Web Asset Security Assessment Grey Box Web Penetration Testing - USA Tender
The COMMERCE, DEPARTMENT OF | BUREAU OF INDUSTRY AND SECURITY, a Government sector organization in USA, has announced a new tender for NATO Business Opportunity: Web Asset Security Assessment Grey Box Web Penetration Testing. This tender is published on USARFP under UST Ref No: 126359879 and is categorized as a Tender. Interested and eligible suppliers are invited to participate by reviewing the tender documents and submitting their bids before the deadline on 2025-09-22.
The estimated tender value is Refer Document, and full details, including technical specifications and submission requirements, are provided in the official tender documents. Ensure all submissions meet the criteria outlined to be considered for evaluation.
