DOC RFQ: NATO Business Opportunity for Web Asset Security Assessment Grey Box Web Penetration Testing

Notice ID: RFQ-CO-424225-PEN

Project Objective:

To assess the security vulnerabilities and risks associated with NATO web assets. The security audit will be conducted using a greybox approach and following OWASP Application Security Verification Standard.

Scope of Work:

1. Conduct manual penetration testing following a grey box approach for
   1. web assets exposed to the internet and ii) web assets not exposed to the internet.
2. Assess the security vulnerabilities and risks associated with the web assets.
3. Provide recommendations to mitigate the identified risks.

The Period of Performance is for a nine-month basic period, followed by two 12-month optional periods. The basic period is anticipated to start in April 2025 and end on 31 December 2025.

Read more here.

🔊 Listen to Story