NATO Business Opportunity: Crowdsourced Black Box Web Penetration Testing (BBPT) of External Web Assets

The NATO Communications and Information Agency (NCIA) is seeking a contractor to provide crowdsourced Black Box Web Penetration Testing (BBPT) of external web assets. The objective is to identify, report, and support the remediation of vulnerabilities, reducing NATO's exposure to cyber threats. The awarded contractor will be responsible for recruiting and managing vetted researchers, operating a secure testing platform, and adhering to reporting and security protocols. The contract will be Firm-Fixed Price with a period of performance of one year plus two 12-month option periods. Key aspects of the job include: • Providing crowdsourced Black Box Web Penetration Testing (BBPT) of external web assets • Identifying, reporting, and supporting the remediation of vulnerabilities • Recruiting and managing vetted researchers • Operating a secure testing platform • Adhering to reporting and security protocols