Open Cybersecurity & Data Privacy RFPs
Security assessments, penetration testing, SOC services, compliance audits, and privacy program work. Expect requirements around certifications (CISSP, SOC 2, FedRAMP) and incident response capabilities.
Cybersecurity & Data Privacy RFPs by service
- Open RFPs
- 50
- Posted in last 30 days
- 39
- Median disclosed budget
- $330,000
- Next deadline
- October 9, 2026
Updated hourly from the Settle RFP Hunter database.
Most active issuers
- Regional Transit Authority (2)
- Department Of The Air Force, Air Force Materiel Command, Air Force Research Laboratory (2)
- Alberta Securities Commission (1)
- Bureau Of Information Technology (1)
- Bcnet (1)
Closing soonest
View all 50 in RFP Hunter →AI Time Planning Tool Security Testing Services
A Washington government authority is seeking an independent security assessment of an AI time planning tool before deployment. Services include penetration testing, access-control review, FERPA compliance analysis, and PII-handling verification, with emphasis on the exportable slides feature.
- Deadline:
- October 9, 2026
- Budget:
- $9,000
- Issuer:
- Impact Public Schools
- Location:
- Tukwila, Washington, United States
Endpoint Security Solutions
A contracting authority in Ontario is seeking endpoint security solutions. Questions are due by September 25, 2026, with the opportunity deadline listed as October 9, 2026.
- Deadline:
- October 9, 2026
- Issuer:
- House Of Commons
- Location:
- National Capital Region, Ontario, Canada
Co-Managed Security Operations Centre Service
A government authority in Edmonton seeks a vendor for a two-year co-managed SOC service supporting 24x7x365 cybersecurity monitoring, threat detection, intelligence, hunting, and incident response. The engagement also includes tooling optimization, operational maturity, playbook development, and staff mentoring.
- Deadline:
- October 9, 2026
- Location:
- Edmonton, Alberta, Canada
24x7x365 Security Operations Center Services
A British Columbia government authority is gathering information on providers capable of delivering round-the-clock SOC monitoring and incident coordination for higher education institutions. Suppliers should describe supported security data sources, implementation approaches, solution options, and indicative pricing.
- Deadline:
- October 9, 2026
- Issuer:
- Bcnet
- Location:
- British Columbia, Canada
Cybersecurity Professional Services
A Vancouver government authority seeks cybersecurity experts for risk assessments, penetration testing, incident response planning, GRC consulting, and PCI DSS compliance services. Questions are due October 2, 2026, with proposals due October 9, 2026.
- Deadline:
- October 9, 2026
- Location:
- Vancouver, British Columbia, Canada
Penetration Test Engagement Service
A Seattle government authority seeks penetration testing and red team services covering internal, external, cloud, remote access, network segmentation, and identity controls. The vendor must document attack paths and business impacts, recommend prioritized remediation, and support validation retesting.
- Deadline:
- October 9, 2026
- Budget:
- $75,000
- Issuer:
- Port Of Seattle
- Location:
- Seattle, Washington, United States
Ransomware Containment Solution
A three-year contract is sought for a ransomware containment solution with behavioral detection, automated endpoint isolation, investigation, recovery, monitoring, reporting, and integration capabilities.
- Deadline:
- October 12, 2026
- Location:
- Ireland
Security Operations Centre, SIEM and Managed Incident Response Solution
A vendor is required to deliver a 24x7x365 security operations centre, SIEM, and managed incident response service. Key requirements include multi-source log collection, UEBA, real-time alerting, reporting and visualization, GDPR and NIS2 compliance reporting, and resilient staffing coverage.
- Deadline:
- October 12, 2026
- Budget:
- $900,000
- Issuer:
- Health And Safety Authority
- Location:
- Dublin, Ireland
Managed Security Service Provider Services
A government authority in Concord, New Hampshire seeks a managed security service provider for 24/7 cybersecurity monitoring, incident response, and support across both central systems and field-deployed transportation technology assets. The contract term is expected to be five years.
- Deadline:
- October 13, 2026
- Issuer:
- New Hampshire Department Of Transportation
- Location:
- Concord, New Hampshire, United States
Disaster Recovery Strategy Refresh Service
The organization is seeking disaster recovery expertise to update its strategy, runbooks, accountability model, and testing framework across SaaS, hybrid, connectivity, and on-premises environments. The engagement includes assessment of the existing Zerto-based approach and development of scenario-based recovery procedures.
- Deadline:
- October 14, 2026
- Issuer:
- Alberta Investment Management Corporation
- Location:
- Edmonton, Alberta, Canada
Protect Elite Product Service
A Georgia government authority is seeking a vendor to renew and provide 1,400 Protect Elite licenses with comprehensive endpoint, server, cloud, threat detection, patch management, encryption, and MFA capabilities under a three-year contract.
- Deadline:
- October 14, 2026
- Issuer:
- Jones County School System
- Location:
- Gray, Georgia, United States
Privacy Expert Consultant Services
A Newfoundland and Labrador government authority seeks a privacy consultant to conduct privacy impact assessments, evaluate technology-related privacy risks, and support improvements to its privacy program, including provincial eHealth projects.
- Deadline:
- October 15, 2026
- Issuer:
- NL Health Services
- Location:
- Newfoundland and Labrador, Canada
Managed Security Service
A Dallas government authority seeks a managed security services provider for three years of continuous security operations coverage, platform tuning, alert enhancement, and operational support. The engagement includes weekend, overnight, and holiday coverage.
- Deadline:
- October 15, 2026
- Location:
- Dallas, Texas, United States
Cybersecurity Assessment and Penetration Testing Services
A government authority in New Orleans is seeking cybersecurity assessment and penetration testing services. Questions are due October 8, 2026, with the response deadline on October 16, 2026.
- Deadline:
- October 16, 2026
- Issuer:
- Regional Transit Authority
- Location:
- New Orleans, Louisiana, United States
Independent Audit of Automatic License Plate Reader Equipment, Data, Governance and Compliance
A government authority in Woodside, California is seeking an independent audit of its automatic license plate reader equipment, data, governance, and compliance program. Qualified firms should possess expertise in privacy, cybersecurity, public safety data auditing, and digital forensics.
- Deadline:
- October 16, 2026
- Issuer:
- Town Of Woodside
- Location:
- Woodside, California, United States
Critical Infrastructure Protection Recovery Exercise and Consulting Services
A Texas government authority seeks consulting support to design and facilitate annual Critical Infrastructure Protection recovery exercises. The engagement includes exercise documentation, lessons learned, audit reporting, and audit evidence assurance.
- Deadline:
- October 16, 2026
- Issuer:
- Electric Reliability Council Of Texas
- Location:
- Taylor, Texas, United States
Cyber Third-Party Risk Management Services
A New Mexico government authority seeks a vendor to develop and deliver a scalable cyber third-party risk management program and toolset for participating local entities. Work includes risk governance, vendor assessment and monitoring, cybersecurity requirements, training, legal evaluation, and template ordinances.
- Deadline:
- October 16, 2026
- Issuer:
- New Mexico Office Of Cybersecurity
- Location:
- New Mexico, United States
Cybersecurity Maturity Model Certification Program Services
A Fayetteville, Arkansas government authority seeks cybersecurity expertise to mature and sustain its Cybersecurity Maturity Model Certification program. The two-year engagement includes control architecture, compliance planning, continuous monitoring, security operations, and assessment readiness.
- Deadline:
- October 16, 2026
- Issuer:
- University Of Arkansas
- Location:
- Fayetteville, Arkansas, United States
IT Systems Cybersecurity Audit and Systems Integration Review Service
A Maryland government authority seeks cybersecurity and systems integration expertise to assess enterprise IT risks, controls, integrations, third-party applications, and monitoring capabilities. Questions are due September 11, 2026, with proposals due October 16, 2026.
- Deadline:
- October 16, 2026
- Issuer:
- Corporation For Supportive Housing
- Location:
- United States
Cloud-Based Email Security Platform
A vendor is sought to supply and manage a cloud-based email security platform for approximately 840 Microsoft 365 mailboxes. Requirements include full-stack threat protection, multi-domain and hybrid support, migration assistance, administrator training, and a one-year contract.
- Deadline:
- October 20, 2026
- Issuer:
- City Of Saskatoon
- Location:
- Saskatoon, Saskatchewan, Canada
Comprehensive Phishing and Security Awareness Training Platform
A Canadian public-sector organization seeks a one-year phishing simulation and security awareness training platform with integrations, privacy controls, analytics, and ongoing support services.
- Deadline:
- October 20, 2026
- Location:
- Alberta, Canada
Cloud-Hosted Check Point Security Solution
A vendor is sought to provide a cloud-hosted Check Point security solution with appliances, software, support, implementation, migration, and related cloud security subscriptions. Questions are due September 14, 2026, and proposals are due October 20, 2026.
- Deadline:
- October 20, 2026
- Location:
- South Carolina, United States
5G Signature Tracking Mitigation Services
This requirement seeks an advanced digital signature management and deception system to mitigate 5G-based tracking and obfuscate cellular metadata. The services will support protection of government personnel, small units, and critical facilities from adversarial surveillance.
- Deadline:
- October 21, 2026
- Location:
- United States
Cloud-Based Firewall as a Service
The organization seeks an E-Rate-eligible provider for a three-year cloud-based Firewall as a Service solution, including implementation, licensing, support, zero-trust security, content filtering, CASB, private network access, and SD-WAN capabilities.
- Deadline:
- October 21, 2026
- Issuer:
- Idea Greater Cincinnati, Inc.
- Location:
- Cincinnati, Ohio, United States
Frequently asked questions
- How many Cybersecurity & Data Privacy RFPs are open right now?
- There are currently 50 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 39 of which were posted in the last 30 days. This page is refreshed hourly.
- What budgets do Cybersecurity & Data Privacy RFPs have?
- 9 of the open listings disclose a budget, with a median of about $330,000. Disclosed budgets range from $9,000 to $99,900,000.
- When is the next submission deadline for Cybersecurity & Data Privacy RFPs?
- The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is October 9, 2026. Each listing page shows the full timeline, including question deadlines where published.
Other categories
- Financial, Legal, HR & Staffing(633)
- Software, Web & Mobile Development(478)
- Architecture, Engineering & Urban Planning(442)
- Construction, Facilities & Maintenance(416)
- Management Consulting & Admin Support(293)
- IT Support, Hardware & Networking(278)
- Healthcare Services, Wellness & Biotech(192)
- Events, Printing & Promotional Goods(157)
- Marketing, Advertising & Social Media(156)