How many Cybersecurity & Data Privacy RFPs are open right now?

There are currently 53 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 45 of which were posted in the last 30 days. This page is refreshed hourly.

What budgets do Cybersecurity & Data Privacy RFPs have?

12 of the open listings disclose a budget, with a median of about $850,000. Disclosed budgets range from $5,000 to $625,996,046.

When is the next submission deadline for Cybersecurity & Data Privacy RFPs?

The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is September 21, 2026. Each listing page shows the full timeline, including question deadlines where published.

Open Cybersecurity & Data Privacy RFPs

Security assessments, penetration testing, SOC services, compliance audits, and privacy program work. Expect requirements around certifications (CISSP, SOC 2, FedRAMP) and incident response capabilities.

Cybersecurity & Data Privacy RFPs by service

Open RFPs: 53
Posted in last 30 days: 45
Median disclosed budget: $850,000
Next deadline: September 21, 2026

Updated hourly from the Settle RFP Hunter database.

Most active issuers

District Of Columbia Housing Finance Agency (2)
Department Of The Air Force, Air Force Materiel Command, Air Force Research Laboratory (2)
Bcnet (1)
City Of Cortland (1)
City Of Columbus, Department Of Technology (1)

Closing soonest

View all 53 in RFP Hunter →

Cybersecurity Services

A Saskatchewan government authority is seeking cybersecurity services. The notice provides limited information, and the full RFP document is unavailable.

Deadline:: September 21, 2026
Issuer:: Cybersecurity And Risk Management Branch

Cyber Data Pipeline Services

The government authority seeks services to develop and support a scalable, vendor-neutral cybersecurity data ingestion platform. The solution must handle the collection, processing, enrichment, and routing of high-volume enterprise telemetry and cybersecurity logs.

Deadline:: September 21, 2026
Location:: Washington, District of Columbia, United States

Network, Cloud and Cyber Services

The government authority seeks comprehensive network, cloud platform, systems, and cybersecurity operations support. Services include infrastructure monitoring, cloud troubleshooting, incident analysis, log analysis, and vulnerability assessments across host, network, database, web, and cloud environments.

Deadline:: September 22, 2026
Budget:: $625,996,046
Issuer:: Department Of Homeland Security
Location:: Washington, District of Columbia, United States; Ashburn, Virginia, United States; Springfield, Virginia, United States; Chandler, Arizona, United States; Lorton, Virginia, United States; Stennis Space Center, Mississippi, United States; Bluemont, Virginia, United States

Personnel Security Alert Management Platform

This request for information seeks a platform to support personnel-security operations through cybersecurity event correlation, alert triage, risk-based prioritization, and workflow automation. SIEM and security operations platform vendors are the intended respondents.

Deadline:: September 22, 2026
Issuer:: Defense Counterintelligence And Security Agency
Location:: Quantico, Virginia, United States

Cybersecurity Evaluation and Enhancement Services

A Columbus, Ohio government authority seeks cybersecurity expertise to assess and strengthen controls protecting critical IT infrastructure and applications. Services include implementation, configuration, testing, and ongoing support.

Deadline:: September 22, 2026
Issuer:: City Of Columbus, Department Of Technology
Location:: Columbus, Ohio, United States

SMS and Voice Multi-Factor Authentication Services

The agency seeks a fully managed SMS and automated voice messaging provider for multi-factor authentication and authorized outbound notifications. The solution must include reliable delivery at significant monthly volumes, a supported API, documentation, training, and integration assistance.

Deadline:: September 22, 2026
Location:: Illinois, United States

Incident Response and Digital Forensic Services

An Iowa government authority seeks rapid incident response and digital forensic support for critical and high-severity cybersecurity incidents. Services span ransomware, data breach, cloud, endpoint, email, mobile, and infrastructure investigations, along with incident management and post-incident resilience recommendations.

Deadline:: September 22, 2026
Issuer:: The University Of Iowa
Location:: Iowa City, Iowa, United States

Cross-Domain Interface Software

This presolicitation seeks vendors to develop bidirectional cross-domain interface software for expeditionary modular computer systems. The solution must support maintainable rule sets, process up to 100 Mbps of diverse data, and provide logging.

Deadline:: September 23, 2026
Issuer:: Navy
Location:: United States

Student Identity Verification Software and Services

A South Carolina technical college is seeking a five-year student identity verification software and services solution to detect fraudulent applications and protect data integrity. The scope includes implementation, training, ongoing support, maintenance, and data security.

Deadline:: September 24, 2026
Location:: South Carolina, United States

Student Identity Verification Software and Support Services

A technical college seeks identity verification software and five years of support to detect fraudulent student applications for approximately 10,000 new students annually. The solution must support integration, training, technical maintenance, and secure U.S.-based data storage.

Deadline:: September 24, 2026
Location:: South Carolina, United States

Darktrace Renewal

This RFP seeks a vendor to provide a one-year Darktrace renewal, including software updates, patches, technical support, and security intelligence subscriptions. The solution monitors and analyzes data across Internet and selected operational technology segments.

Deadline:: September 24, 2026
Budget:: $1,000,000 – $5,000,000
Issuer:: Mta-Nyct/Bsc
Location:: New York, New York, United States

Cybersecurity Specialist Services

A vendor is required to deliver managed cybersecurity operations, threat detection, incident response, testing, compliance reviews, training, advisory services, and related security tools under a one-year contract.

Deadline:: September 24, 2026
Budget:: $800,000
Issuer:: Fáilte Ireland
Location:: Dublin, Ireland

Mailgate Renewal Service

Renewal of an existing Mailgate email security solution and related service support.

Deadline:: September 25, 2026
Issuer:: Superior Court Of California, County Of Ventura
Location:: California, United States

PCI DSS Compliance Assessment and Penetration Testing Service

A government authority in Ontario is seeking PCI DSS compliance assessment and penetration testing services. Questions are due by September 18, 2026, with the opportunity deadline on September 25, 2026.

Deadline:: September 25, 2026
Issuer:: Toronto Parking Authority
Location:: Toronto, Ontario, Canada

Cybersecurity Consulting and Assessment Services

The City of Cortland seeks a cybersecurity consulting firm to assess and improve the security of its water and wastewater treatment infrastructure. Work includes OT and IT risk assessments, penetration testing, network and asset reviews, and development of a compliance roadmap.

Deadline:: September 25, 2026
Budget:: $50,000
Issuer:: City Of Cortland
Location:: Cortland, New York, United States

RFI for Software-Based Encryption Services

The government authority is gathering information on software-only encryption solutions that provide packet-level protection without changes to existing hardware. Solutions should support PKI integration, secure key establishment, and agency control over data and cryptographic keys.

Deadline:: September 27, 2026
Issuer:: Washington Headquarters Services
Location:: Washington, District of Columbia, United States

Security Operations Centre as a Service

A Tulsa, Oklahoma government authority is seeking a provider for 24/7/365 Security Operations Centre as a Service, including monitoring, threat detection, incident response, vulnerability correlation, reporting, and security posture improvement. The contract term is one year.

Deadline:: September 28, 2026
Budget:: $150,000 – $300,000 (est.)
Issuer:: Oklahoma State University Center For Health Sciences
Location:: Tulsa, Oklahoma, United States

Security Information and Event Management Service

The procuring organization is seeking a 24x7x365 managed SIEM and cybersecurity operations provider to deliver monitoring, threat detection, incident response, platform support, and continuous improvement. The supplier must support Microsoft Sentinel, Microsoft Defender, and non-Microsoft security event sources.

Deadline:: September 29, 2026
Location:: Ireland

Web-Based Individual Driver Record Checks and Risk Assessments

The County is seeking a web-based solution for driver record checks, risk assessments, and license-status audits. The system must meet County external data-hosting security standards and support safety and loss prevention activities.

Deadline:: September 29, 2026
Issuer:: Orange County Government Board Of County Commissioners
Location:: Orlando, Florida, United States

SOC 2+ Type I Web Application Examination Audit Services

A Tennessee government authority seeks an independent SOC 2+ Type I examination of a web application. The engagement includes maintaining the Master Crosswalk and tailoring audit artifacts to a serverless cloud environment.

Deadline:: September 30, 2026
Issuer:: Ecm-Health, Inc.

Managed Detection and Response Service

An Alberta government authority is seeking a managed detection and response provider to implement, integrate, operate, and support a comprehensive cybersecurity solution. The engagement includes incident response planning, real-time alerting, endpoint and ransomware protection, asset discovery, mobile threat defense, and staff training.

Deadline:: September 30, 2026
Issuer:: The Good Samaritan Society
Location:: British Columbia, Canada; Edmonton, Alberta, Canada

AI Governance Solution

The county seeks a five-year AI governance solution covering AI discovery, policy enforcement, identity and access controls, monitoring, auditability, incident response, and cost management. Vendors must submit questions by September 15, 2026, with proposals due October 1, 2026.

Deadline:: October 1, 2026
Issuer:: Snohomish County Purchasing Division
Location:: Everett, Washington, United States

IT Penetration Testing Services

A Washington, DC government authority seeks qualified vendors to conduct IT penetration testing that simulates real-world attacks and evaluates security controls. Testing must follow industry standards, avoid intentional disruption or data deletion, and use agency-approved IP addresses.

Deadline:: October 1, 2026
Issuer:: District Of Columbia Housing Finance Agency
Location:: Washington, District of Columbia, United States

Cybersecurity and Managed Security Services

A Pennsylvania government authority is seeking cybersecurity and managed security services. The available notice is informational and does not include the main RFP document.

Deadline:: October 1, 2026
Issuer:: Pennsylvania’s State System Of Higher Education
Location:: Pennsylvania, United States

Frequently asked questions

How many Cybersecurity & Data Privacy RFPs are open right now?: There are currently 53 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 45 of which were posted in the last 30 days. This page is refreshed hourly.
What budgets do Cybersecurity & Data Privacy RFPs have?: 12 of the open listings disclose a budget, with a median of about $850,000. Disclosed budgets range from $5,000 to $625,996,046.
When is the next submission deadline for Cybersecurity & Data Privacy RFPs?: The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is September 21, 2026. Each listing page shows the full timeline, including question deadlines where published.