The Kent County Purchasing Division is seeking proposals for comprehensive penetration testing services for its web applications and network infrastructure. Vendors can bid on Part 1 (Web Application Penetration Testing), Part 2 (Network Penetration Testing), or both. A non-mandatory teleconference is scheduled for March 31, 2026. Proposals are due by April 10, 2026, at 2 PM local time. Submissions must be in a single, non-password-protected PDF document. Key evaluation criteria include methodology, experience, reporting quality, cost, and references. An optional Part 3 for Social Media Penetration Testing is also available.
The due date for proposal submission is April 10, 2026, at 2 PM local time. The bid notice states, due date time local ****, 2 PM.
The bid notice mentions providing a detailed pricing methodology including payment terms, but does not specify them. It states, provide a detailed pricing methodology for an allinclusive, implemented recommendation including payment terms, unit costs, billable costs, and all other expenses.
Proposals will be evaluated based on testing methodology and approach, relevant experience and qualifications, quality of reporting and sample deliverables, cost effectiveness, and client references and satisfaction. The bid notice states, Proposals will be evaluated based on: testing methodology and approach relevant experience and qualifications quality of reporting and sample deliverables cost effectiveness client references and satisfaction.
Proposal qualifications must include company overview and years of experience, relevant staff certifications (e. g. , OSCP, OSCE, GWAPT, GPEN, GXPN, CISSP), experience with government or public sector clients, sample deliverables (redacted reports), and at least two relevant client references. The bid notice states, Proposal proposals must include: Company overview and years of experience. Relevant staff certifications e. g. , OSCP, OSCE, GWAPT, GPEN, GXPN, CISSP. Experience with government or publicsector clients. Sample deliverables redacted reports. At least two relevant client references.
A non-mandatory teleconference is scheduled for March 31, 2026, at 11:00 AM. The bid notice states, presubmission conference yes: nonmandatory teleconference attendance recommended preregistration required conference date time local **** 11: 00 AM.
Vendors are required to provide sample deliverables, specifically redacted reports. The bid notice states, Sample deliverables redacted reports.
