Annual External Vulnerability and Web Application Scanning Services

The St. Johns County - Purchasing Department is seeking quotes from qualified cybersecurity service providers to perform annual external vulnerability assessments and web application scanning services on an as-needed basis. The selected supplier will provide comprehensive, non-destructive security scanning of the county's public-facing infrastructure to identify, assess, and prioritize potential security vulnerabilities and misconfigurations. The scope of work includes vulnerability identification, severity scoring, contextual threat intelligence analysis, validation, historical vulnerability tracking, and detailed reporting with actionable remediation recommendations. Some key points to consider: • The supplier must be capable of providing timely, accurate, and repeatable assessments that support the county's cybersecurity program, risk management efforts, and compliance with applicable public sector security standards and best practices. • The county is looking for a supplier that can provide comprehensive security scanning services, including external IP addresses and web applications. • The selected supplier will be required to provide detailed reporting with actionable remediation recommendations.