Open Cybersecurity & Data Privacy RFPs
Security assessments, penetration testing, SOC services, compliance audits, and privacy program work. Expect requirements around certifications (CISSP, SOC 2, FedRAMP) and incident response capabilities.
Cybersecurity & Data Privacy RFPs by service
- Open RFPs
- 56
- Posted in last 30 days
- 48
- Median disclosed budget
- $3,000,000
- Next deadline
- July 21, 2026
Updated hourly from the Settle RFP Hunter database.
Most active issuers
- The Port Authority Of New York And New Jersey (2)
- New Jersey Cyber Risk Management Fund (2)
- Charter Township Of Washington (2)
- Bi-State Development (1)
- California Department of Technology (1)
Closing soonest
View all 56 in RFP Hunter →Platform Penetration Testing Consultancy Service
A South African government authority requires penetration testing consultancy services for an Android application, web-based configuration interface, APIs, and supporting backend infrastructure. The work excludes physical security and social engineering assessments and will be conducted in staging environments.
- Deadline:
- July 21, 2026
- Issuer:
- Tiko
- Location:
- Kenya; South Africa; Uganda; Ethiopia; Burkina Faso
Information Technology Vulnerability Management Services
The government authority in British Columbia is requesting vendors to provide remote vulnerability management services, including remediation activities, application patching, and risk-based prioritization of IT vulnerabilities.
- Deadline:
- July 21, 2026
- Issuer:
- City Of Kelowna
- Location:
- Kelowna, British Columbia, Canada
IT Security Assessments and Incident Response Services
South Carolina seeks a provider for IT security assessments and incident response services, excluding infrastructure, telecommunications, and software development activities.
- Deadline:
- July 21, 2026
- Issuer:
- State Fiscal Accountability Authority, Division Of Procurement Services
- Location:
- Columbia, South Carolina, United States
Independent Gaming Laboratory Services
Indiana seeks an independent laboratory to test and audit electronic gaming equipment and technologies, including penetration testing and on-site audits.
- Deadline:
- July 22, 2026
- Issuer:
- Indiana Gaming Commission
- Location:
- Indianapolis, Indiana, United States
Real-Time Zero Trust Data Access Control System
Washington, DC government seeks a vendor to develop a real-time Zero Trust data access control system for combat environments, featuring AI/ML-driven adaptive security and comprehensive access management.
- Deadline:
- July 22, 2026
- Issuer:
- Department Of War
- Location:
- United States
Financial Crime Search and Due Diligence Software
U.S. HHS is conducting market research for a SaaS financial crime search and due diligence platform supporting vendor and supply chain risk assessments. The requirement includes screening, monitoring, UBO research, data access, technical support, and user training for ten users.
- Deadline:
- July 23, 2026
- Location:
- United States
Security Information Event Management (SIEM) Software and Support
Federal opportunity for SIEM software and support services under a new task order. Limited public details are available beyond the title and publication information.
- Deadline:
- July 23, 2026
- Location:
- United States
Cybersecurity Architecture and Engineering Services
The Department of Veterans Affairs is conducting market research for cybersecurity operations systems engineering support. Vendors are invited to submit capability information, relevant experience, and a ROM estimate for a potential multi-year requirement.
- Deadline:
- July 23, 2026
- Location:
- United States
Persistent Cyber Training Environment Support Services
A government authority in Norfolk, Virginia is seeking vendors for persistent cyber training environment support services under a one-year contract. The opportunity is set aside for SBA Certified Women-Owned Small Business firms.
- Deadline:
- July 23, 2026
- Location:
- Norfolk, Virginia, United States
Security Information Event Management Software
The RFP seeks a self-hosted SIEM platform for air-gapped environments with container-native deployment, centralized event visibility, and strong forensic investigation capabilities. The solution must also support raw and normalized log retention, unstructured data ingestion, and integration with vulnerability scanning information.
- Deadline:
- July 23, 2026
- Location:
- New Jersey, United States
Cybersecurity Architecture and Engineering Services
A government authority in Eatontown, New Jersey is requesting information from vendors that can provide cybersecurity architecture, engineering, risk management, and strategic security support. The work spans architecture design, secure solution implementation, program oversight, and analytics-driven risk evaluation.
- Deadline:
- July 23, 2026
- Issuer:
- Veterans Affairs, Department Of
- Location:
- Eatontown, New Jersey, United States
Email Protection and Security Awareness Training Subscription Service
A vendor is sought to provide email protection and subscription-based security awareness training services. Limited details are available in the posting summary.
- Deadline:
- July 23, 2026
- Issuer:
- Nassau County
- Location:
- New York, United States
Enterprise Network Access Control Solution
Ontario is seeking vendor information for an enterprise Network Access Control solution for its Connectivity and Security Services Branch. The requirement includes a managed, on-premises NAC platform, pre-configured hardware and software appliances, ongoing updates, and 24/7 support over a seven-year term.
- Deadline:
- July 27, 2026
- Issuer:
- Shared Services Canada
- Location:
- Ottawa, Ontario, Canada
Annual External Vulnerability and Web Application Scanning Services
Florida government authority seeks cybersecurity vendors to provide annual external vulnerability assessments and web application scanning for public-facing infrastructure. Services include threat-informed analysis, false-positive validation, tracking, and remediation-focused reporting.
- Deadline:
- July 28, 2026
- Issuer:
- St. Johns County - Purchasing Department
- Location:
- Florida, United States
Privacy Resource Services
A Saskatchewan government authority is seeking a vendor for privacy resource services. Limited details are available because the full RFP document was not included.
- Deadline:
- July 28, 2026
- Issuer:
- Government Of Saskatchewan
- Location:
- Saskatchewan, Canada
Cyber Security Services
A Minnesota government authority is seeking a cyber security services provider to supply flexible staffing resources across several senior and technical security roles. The contract term is one year.
- Deadline:
- July 28, 2026
- Issuer:
- Metropolitan Council
- Location:
- Minnesota, United States
Application Security Testing Platform
A California-based solicitation seeks an application security testing platform with integrated SAST, DAST, SCA, and AI-assisted remediation capabilities. The solution must support CI/CD integration, secure authentication, flexible deployment models, and training for agency users.
- Deadline:
- July 29, 2026
- Issuer:
- County Of Sacramento
- Location:
- Sacramento, California, United States
Cyber Phishing Simulation and Security Awareness Training Service
A government authority in Parsippany, New Jersey seeks a vendor to provide cloud-based security awareness training and ongoing phishing simulation services for up to 38,000 employees. The solution must include role-based phishing campaigns, reporting dashboards, remedial content, and managed program support.
- Deadline:
- July 29, 2026
- Issuer:
- New Jersey Cyber Risk Management Fund
- Location:
- Parsippany, New Jersey, United States
Cyber External Scanning Service
A government authority in Parsippany, New Jersey is seeking a vendor to deliver ongoing external cyber vulnerability scanning and monthly reporting. The work includes weekly perimeter scanning, shadow IT detection, and monthly vulnerability mapping for public-facing assets.
- Deadline:
- July 29, 2026
- Issuer:
- New Jersey Cyber Risk Management Fund
- Location:
- Parsippany, New Jersey, United States
Cybersecurity Assessment Services
Washington Township, Michigan seeks a vendor to perform a thorough cybersecurity assessment of its systems and practices, including risk identification, penetration testing, and recommendations for improvement.
- Deadline:
- July 29, 2026
- Issuer:
- Charter Township Of Washington
- Location:
- Washington Township, Michigan, United States
Multifactor Authentication Platform
RFP seeking a secure Multifactor Authentication platform with full implementation and ongoing support for a Michigan municipality’s systems and users.
- Deadline:
- July 29, 2026
- Issuer:
- Charter Township Of Washington
- Location:
- Washington Township, Michigan, United States
Digital Privacy Protection Solution
Request for information regarding a comprehensive digital privacy protection solution featuring identity and information removal, social media mitigation, and broader privacy monitoring.
- Deadline:
- July 29, 2026
- Issuer:
- Florida Department Of Children And Families
- Location:
- Florida, United States
Cyber Application Solution
A government authority in Rome, New York is seeking a cyber application solution to support development of next-generation alternate access cyber capabilities. The work is aimed at improving cyber resilience and operational effectiveness in contested or disconnected environments.
- Deadline:
- July 30, 2026
- Budget:
- $10,000,000 – $99,990,000
- Issuer:
- Department of the Air Force, Air Force Materiel Command, AFRL - Rome Research Site
- Location:
- Rome, New York, United States
Integrated National Intelligence Systems Cybersecurity, Engineering, and Technology Implementation Support Services
A South Carolina government authority seeks a vendor for cybersecurity, engineering, and technology implementation support for integrated national intelligence systems. The work emphasizes enterprise-scale data security, Zero Trust architecture, encryption, tagging, and data discovery capabilities within an Intelligence Community context.
- Deadline:
- July 30, 2026
- Budget:
- $345,000,000 (est.)
- Issuer:
- Naval Information Warfare Center Atlantic
- Location:
- Hanahan, South Carolina, United States
Frequently asked questions
- How many Cybersecurity & Data Privacy RFPs are open right now?
- There are currently 56 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 48 of which were posted in the last 30 days. This page is refreshed hourly.
- What budgets do Cybersecurity & Data Privacy RFPs have?
- 9 of the open listings disclose a budget, with a median of about $3,000,000. Disclosed budgets range from $0 to $345,000,000.
- When is the next submission deadline for Cybersecurity & Data Privacy RFPs?
- The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is July 21, 2026. Each listing page shows the full timeline, including question deadlines where published.
Other categories
- Software, Web & Mobile Development(486)
- Financial, Legal, HR & Staffing(484)
- Construction, Facilities & Maintenance(398)
- Architecture, Engineering & Urban Planning(324)
- Management Consulting & Admin Support(250)
- IT Support, Hardware & Networking(220)
- Marketing, Advertising & Social Media(141)
- Events, Printing & Promotional Goods(139)
- Hospitality, Food Service & Travel(135)