RFP - Multi-Jurisdictional, Cybersecurity Penetration Testing

The Atlanta Regional Commission (ARC) is seeking a vendor to provide cybersecurity penetration testing for jurisdictional members of the Atlanta Urban Area Security Initiative (UASI). The testing will include web application testing, network testing, and social engineering tests. The vendor will be required to perform one penetration test for each jurisdiction and provide a sample penetration test report. The project's total cost shall not exceed $150,000.00. The successful vendor should be prepared to begin work within ten days of the fully signed contract. Key aspects of the project include: • Performing penetration web testing from unauthenticated, authenticated, and administrative user perspectives • Evaluating the agency's IT infrastructure at the network, system, and application levels • Testing at least 5,000 internal IP addresses and 125 active external IP addresses • Locating all services and applications within a provided subnet • Exploiting all possible attack surfaces identified • Providing a sample penetration test report