See More RFPs

Penetration Test Engagement Service

Overview


Cybersecurity & Data Privacy
Seattle, Washington, United StatesPosted: September 3, 2026Deadline: October 9, 2026

Settle Signals


Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY


A Seattle government authority seeks penetration testing and red team services covering internal, external, cloud, remote access, network segmentation, and identity controls. The vendor must document attack paths and business impacts, recommend prioritized remediation, and support validation retesting.

KEY REQUIREMENTS


BUDGET

Verified

$75,000

CONTRACT DURATION


6 months

TIMELINE


Advertisement: August 13th, 2026

Last Day to Ask Questions: August 19th, 2026

Proposals Due: August 31st, 2026

Shortlist Notification: Week of September 14th, 2026

Notice of Selection: Week of September 14th, 2026

Execute Agreement: Week of September 21st, 2026

QUESTION DEADLINE


August 19, 2026

CONTACTS


Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

Issuing Agency


Port Of Seattle

Organization overview and procurement intelligence available on paid plans.
See Issuer Research

DESCRIPTION


A government authority in Seattle, Washington, is seeking a vendor to provide penetration testing and red team engagement services aligned with recognized industry standards and methodologies. The engagement will assess the effectiveness of existing security controls, identify exploitable weaknesses, and validate the port’s ability to prevent, detect, respond to, and recover from realistic cyberattack scenarios.

Testing is expected to include internal and external assessments across multiple networks and firewalls, cloud-exposed services, remote access pathways, and identity and access controls. The evaluation will address risks involving unauthorized access, lateral movement, privilege escalation, segmentation bypass, misconfiguration, exposed services, weak authentication, ineffective monitoring, and business process weaknesses.

The selected vendor will provide clear evidence of findings, documented attack paths, business impact analysis, prioritized remediation recommendations, and retesting support where applicable to validate successful remediation. Questions must be submitted by August 20, 2026, and the proposal deadline is October 9, 2026.

Similar RFPs


Frequently asked questions


When is the submission deadline?
This RFP closed on October 9, 2026 and is no longer accepting submissions.
What is the budget for this RFP?
The published budget is $75,000.
Who issued this RFP?
It was issued by Port Of Seattle. The work is located in Seattle, Washington, United States.
Who is a good fit for this opportunity?
  • Cybersecurity firm specializing in penetration testing and red team engagements
  • Demonstrated experience assessing government or critical infrastructure environments
  • Expertise in internal, external, cloud, network, remote access, and identity security testing
  • Practitioners experienced with recognized penetration testing methodologies and standards
  • Capability to provide attack-path documentation, business impact analysis, remediation guidance, and retesting

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works