Network Penetration Testing Network Penetration Testing Services
ID: 2026 - Network Penetration Testing
• State: New York
Opportunity Assistant
Loading
Description
Background
The Village of Ossining, located in Westchester County, New York, is seeking proposals from qualified cybersecurity firms to offer network penetration testing services. This initiative is managed by the Village Manager and coordinated with the Village's IT staff and the Chief of Police. The Village operates under a Village Manager form of government and has a Board of Trustees consisting of five elected members.
Work Details
The selected firm will perform external, internal, and social engineering penetration testing across Village operations. Key services include:
- **External Network Penetration Testing**: Testing of public-facing perimeter including all externally reachable IP addresses, internet-facing services, web applications, remote access portals, VPN endpoints, and externally hosted services. Testing must include reconnaissance, service enumeration, vulnerability identification, exploitation attempts (both authenticated and unauthenticated), password attacks against authentication interfaces, with both automated and manual techniques required.
- **Internal Network Penetration Testing**: Testing of two isolated internal environments at Village Hall and the Police Department simulating threat actor actions including network discovery, vulnerability identification, lateral movement, privilege escalation, credential harvesting, Active Directory enumeration.
- **Isolated Network Deployment**: Deployment of separate testing appliances for each internal environment during engagement.
- **Social Engineering Testing**: Conducting phishing campaigns against Village personnel to assess susceptibility to various techniques.
- **Coordination and Notification**: Weekly updates during testing and immediate notification of critical findings.
- **Reporting**: Delivery of a final report including executive summary, technical findings with risk ratings and remediation recommendations, attack narratives, social engineering results summary, and an engagement log documenting testing activities.
- **Confidentiality and Data Handling**: All findings are confidential property of the Village; data must be stored securely and destroyed after 30 days post-report acceptance.
Period of Performance
Testing commencement date is July 6, 2026. All testing activities and the final written report must be completed by August 10, 2026.
Place of Performance
The contract will be performed at the Village Hall and Police Department in Ossining, New York.
Bidder Requirements
Firms must be authorized to do business in New York State with a minimum of five years' experience in network penetration testing services for municipal or public sector clients. They should demonstrate familiarity with industry-recognized methodologies without any conflicts of interest with the Village.
The Village of Ossining, located in Westchester County, New York, is seeking proposals from qualified cybersecurity firms to offer network penetration testing services. This initiative is managed by the Village Manager and coordinated with the Village's IT staff and the Chief of Police. The Village operates under a Village Manager form of government and has a Board of Trustees consisting of five elected members.
Work Details
The selected firm will perform external, internal, and social engineering penetration testing across Village operations. Key services include:
- **External Network Penetration Testing**: Testing of public-facing perimeter including all externally reachable IP addresses, internet-facing services, web applications, remote access portals, VPN endpoints, and externally hosted services. Testing must include reconnaissance, service enumeration, vulnerability identification, exploitation attempts (both authenticated and unauthenticated), password attacks against authentication interfaces, with both automated and manual techniques required.
- **Internal Network Penetration Testing**: Testing of two isolated internal environments at Village Hall and the Police Department simulating threat actor actions including network discovery, vulnerability identification, lateral movement, privilege escalation, credential harvesting, Active Directory enumeration.
- **Isolated Network Deployment**: Deployment of separate testing appliances for each internal environment during engagement.
- **Social Engineering Testing**: Conducting phishing campaigns against Village personnel to assess susceptibility to various techniques.
- **Coordination and Notification**: Weekly updates during testing and immediate notification of critical findings.
- **Reporting**: Delivery of a final report including executive summary, technical findings with risk ratings and remediation recommendations, attack narratives, social engineering results summary, and an engagement log documenting testing activities.
- **Confidentiality and Data Handling**: All findings are confidential property of the Village; data must be stored securely and destroyed after 30 days post-report acceptance.
Period of Performance
Testing commencement date is July 6, 2026. All testing activities and the final written report must be completed by August 10, 2026.
Place of Performance
The contract will be performed at the Village Hall and Police Department in Ossining, New York.
Bidder Requirements
Firms must be authorized to do business in New York State with a minimum of five years' experience in network penetration testing services for municipal or public sector clients. They should demonstrate familiarity with industry-recognized methodologies without any conflicts of interest with the Village.
Loading Map
Loading Map
Overview
Agency
Opportunity ID
2026 - Network Penetration Testing
Response Deadline
June 19, 2026
Due in 2 Days
Date Posted
June 3, 2026
Source
Est. Value Range
Experimental
$25,000 - $90,000
(AI estimate)
On 6/3/26 Village of Ossining in New York issued Network Penetration Testing
Network Penetration Testing Services with ID 2026 - Network Penetration Testing due 6/19/26.
Contacts
Documents
Posted documents for Network Penetration Testing Network Penetration Testing Services
Opportunity Assistant
AI Analysis
AI Generate