When is the submission deadline?

Submissions are due August 5, 2026. Questions must be submitted by July 6, 2026.

It was issued by Ontario Education Collaborative Marketplace. The work is located in Toronto, Ontario, Canada.

Who is a good fit for this opportunity?

Specialized in vulnerability assessment and penetration testing. Experience with public sector or government clients. Familiarity with diverse IT environments including cloud and SaaS. Ability to conduct both technical testing and compliance advisory services. Based in or able to operate within Ontario.

Vulnerability Assessment, Penetration Testing, and Related Services (Due August 5, 2026)

Overview

Cybersecurity & Data Privacy

Toronto, Ontario, CanadaPosted: July 3rd, 2026Deadline: August 5th, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

Ontario seeks a provider for vulnerability assessments, penetration testing, and related cybersecurity advisory services covering various IT assets and environments.

KEY REQUIREMENTS

Must not be a United States of America Business as defined in the RFP
Must have fewer than 250 full-time employees in Canada if a U.S. Business subsidiary
Must possess appropriate resources with experience in vulnerability assessment, penetration testing, and GRC advisory services
Must have experience applying recognized cybersecurity standards and methodologies
Must have qualified personnel with relevant cybersecurity, privacy, and risk management expertise
Must have experience supporting public sector and complex customer environments
Must maintain Cyber Liability Insurance of at least $2,000,000 per occurrence
Must comply with OECM's Supplier Code of Conduct
Must be able to provide services in Ontario and identify other Canadian geographical locations for service coverage

CONTRACT DURATION

36 months

TIMELINE

Issue Date: June 29th, 2026

Information Session: July 2nd, 2026

Deadline to Submit Questions: July 6th, 2026

Deadline for Issuing Answers: July 13th, 2026

Deadline to Submit Questions Related to Addenda: July 17th, 2026

Deadline for Issuing Final Documents: July 23rd, 2026

Closing Date: August 5th, 2026

Anticipated Master Agreement Start Date: November 2026

QUESTION DEADLINE

July 6th, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Ontario Education Collaborative Marketplace

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

The government authority in Ontario is seeking a qualified vendor to provide vulnerability assessment, penetration testing, and related advisory services. The selected partner will be responsible for cataloguing all IT assets and resources, including applications, databases, endpoints, mobile devices, network devices, cloud environments, containers, APIs, servers, SaaS applications, and operational technology assets as required.

Tasks include assessing current network security controls to identify vulnerabilities, weaknesses, insecure configurations, and exposure risks throughout the organization's environments and architecture. The engagement will also involve comprehensive web application security assessments.

Penetration testing deliverables encompass application, cloud environment, network, and web application penetration testing. In addition, governance, risk, compliance, and advisory services will be required, including manual probing of application interfaces, authentication process testing, business logic analysis, and evaluating the use of encryption within applications.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due August 5, 2026. Questions must be submitted by July 6, 2026.
Who issued this RFP?: It was issued by Ontario Education Collaborative Marketplace. The work is located in Toronto, Ontario, Canada.
Who is a good fit for this opportunity?: Specialized in vulnerability assessment and penetration testing
Experience with public sector or government clients
Familiarity with diverse IT environments including cloud and SaaS
Ability to conduct both technical testing and compliance advisory services
Based in or able to operate within Ontario

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works