When is the submission deadline?

Submissions are due October 26, 2026.

It was issued by City Of Toronto. The work is located in Toronto, Ontario, Canada.

Who is a good fit for this opportunity?

Cybersecurity firm specializing in vulnerability assessments and penetration testing. Experience assessing enterprise IT networks and operational technology environments. Expertise in network segmentation, device hardening, and security control reviews. Capability to conduct phishing, quishing, and vishing social engineering tests. Experience evaluating security logging, monitoring, and log review processes. Proven work with government or other highly regulated organizations.

RFP HunterNever miss another opportunity you should have won.

Book a demo

See More RFPs

Cybersecurity Vulnerability Assessment and Penetration Testing Services

Book a demo

Overview

Cybersecurity & Data Privacy

Toronto, Ontario, CanadaPosted: October 1, 2026Deadline: October 26, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

An Ontario government authority seeks cybersecurity expertise for network vulnerability assessments, penetration testing, segmentation reviews, device hardening, physical security evaluations, social engineering campaigns, and logging assessments.

KEY REQUIREMENTS

Must be a Canadian Supplier, Trade Partner Supplier, or Non-American Supplier
Must be based in Ontario, Canada
Must hold or obtain a valid Police Clearance Letter or Federal Government Security Clearance Certificate
Assigned resources must have a minimum of three years of experience performing vulnerability assessment and penetration testing
Must provide a resume and/or qualifications summary for assigned resources
Must provide a minimum of three references for projects of similar size, scale, and complexity
Must comply with the City's Supplier Code of Conduct
Must maintain required insurance coverage including Commercial General Liability, Technology Errors & Omissions, and Cyber Liability

CONTRACT DURATION

15 months

TIMELINE

Anticipated Ranking of Top Suppliers: November 2026

Bid Validity Period: 120 Days from submission deadline

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

City Of Toronto

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The government authority in Ontario is seeking a qualified vendor to provide cybersecurity vulnerability assessment and penetration testing services. The engagement will include assessments of external and internal networks, as well as evaluation of IT network segmentation from operational technology environments.

The required services may also include configuration and hardening reviews for selected devices, assessment of physical security controls at selected locations, and social engineering testing through phishing, quishing, and vishing campaigns. The vendor will further assess system and security event logging, monitoring, and log review processes.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due October 26, 2026.
Who issued this RFP?: It was issued by City Of Toronto. The work is located in Toronto, Ontario, Canada.
Who is a good fit for this opportunity?: Cybersecurity firm specializing in vulnerability assessments and penetration testing
Experience assessing enterprise IT networks and operational technology environments
Expertise in network segmentation, device hardening, and security control reviews
Capability to conduct phishing, quishing, and vishing social engineering tests
Experience evaluating security logging, monitoring, and log review processes
Proven work with government or other highly regulated organizations

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works