The government authority in Muskegon, Michigan is seeking a vendor to provide comprehensive penetration testing services. The scope includes assessment of approximately 20 external IP addresses owned or managed by the agency, as well as internal testing of a representative sampling of 600 workstations, 100 IP phones, and 150 network devices which include switches, routers, firewalls, and wireless controllers.

Each annual test must produce a detailed report outlining vulnerabilities identified across all tested assets, along with risk ratings and prioritized remediation recommendations. In addition, findings must be summarized in an executive summary tailored for non-technical stakeholders.

The engagement includes a collaborative workshop during the Purple Team phase. The contract period will be for three years, with vendors required to attend a mandatory pre-bid meeting and to submit any questions by March 11, 2026.