EXTERNAL AND INTERNAL NETWORK PENETRATION TESTING SERVICES

Miami University is seeking proposals for external and internal network penetration testing services to identify vulnerabilities and weaknesses in their systems. The successful vendor will conduct a comprehensive test over the course of one week, providing a detailed report and presentation of findings. The scope of work includes testing of 102 external/public IP addresses, 1,241 subdomains, and 1,910 VLANs. The vendor must provide a fixed-fee quote for the entire scope, including a mandatory retest. • The testing will include vulnerability scans and focused exploits based on discovered weaknesses. • The vendor must have recognized penetration testing credentials and follow industry standards such as PTES or NIST. • The vendor must provide proof-of-concept evidence, risk ratings, and prioritized recommendations. • The vendor must have at least $1M in Cyber Liability insurance.