SettleRFP Hunter
Book a demo

Open Cybersecurity & Data Privacy RFPs

Security assessments, penetration testing, SOC services, compliance audits, and privacy program work. Expect requirements around certifications (CISSP, SOC 2, FedRAMP) and incident response capabilities.

Cybersecurity & Data Privacy RFPs by service

Open RFPs
29
Posted in last 30 days
16
Median disclosed budget
$250,000
Next deadline
October 26, 2026

Updated hourly from the Settle RFP Hunter database.

Most active issuers

  • Regional Transit Authority (2)
  • Nassau Community College (2)
  • Department Of The Air Force, Air Force Materiel Command, Air Force Research Laboratory (2)
  • Bureau Of Information Technology (1)
  • City Of Linden (1)

Closing soonest

View all 29 in RFP Hunter →

Managed Detection and Response (MDR) Services

The Bureau of Information Technology of the Government of the U.S. Virgin Islands is seeking a provider for managed cybersecurity services, including continuous monitoring, threat detection, and incident response support.

Deadline:
October 26, 2026
Budget:
$150,000 – $500,000 (est.)
Issuer:
Government of the Virgin Islands, Department of Property and Procurement
Location:
US Virgin Islands, United States

Cybersecurity Vulnerability Assessment and Penetration Testing Services

An Ontario government authority seeks cybersecurity expertise for network vulnerability assessments, penetration testing, segmentation reviews, device hardening, physical security evaluations, social engineering campaigns, and logging assessments.

Deadline:
October 26, 2026
Issuer:
City Of Toronto
Location:
Toronto, Ontario, Canada

Managed Detection and Response Services

The government authority in the United States Virgin Islands is seeking a managed detection and response provider to deliver continuous monitoring, threat detection, investigation, and incident response support. The provider must integrate with the existing cybersecurity environment and support regulatory and operational resilience objectives.

Deadline:
October 26, 2026
Issuer:
Bureau Of Information Technology
Location:
Christiansted, US Virgin Islands; Saint Thomas, US Virgin Islands

Cybersecurity Framework 2.0 Adoption and Maturity Advancement Services

The organization seeks cybersecurity expertise to adopt CSF 2.0, consolidate current-state assessments, and advance cybersecurity maturity. Deliverables include a prioritized gap analysis, multi-year roadmap, policy development, control implementation, Microsoft-integrated metrics, and staff enablement.

Deadline:
October 26, 2026
Issuer:
Greenville-Spartanburg Airport District
Location:
Greer, South Carolina, United States

Backup and Recovery Solution

The agency seeks a SaaS enterprise backup and recovery provider capable of protecting at least 1,000 entities across virtualized, cloud, database, and physical server environments. The engagement includes implementation, proof-of-concept testing, recovery validation, and ongoing support.

Deadline:
October 26, 2026
Budget:
$330,000
Issuer:
University Of Dundee
Location:
Dundee, United Kingdom

E-Rate Firewall License Service

The agency seeks one FortiGate firewall license for existing equipment under an E-Rate-supported service requirement. Vendor questions are due September 18, 2026, and proposals are due October 26, 2026.

Deadline:
October 26, 2026
Location:
Wisconsin, United States

Corporate and Physical Penetration Test

Lincoln Electric System is seeking proposals for corporate and physical penetration testing services.

Deadline:
October 27, 2026
Budget:
$25,000 – $75,000 (est.)
Issuer:
Lincoln Electric System
Location:
Lincoln, Nebraska, United States

Managed Governance, Risk, Compliance and Cybersecurity Program Management Services

A government authority in Garden, New York, is seeking managed services to strengthen cybersecurity governance, risk and compliance management, asset inventories, remediation oversight, and executive reporting. The consultant will actively manage cybersecurity programs, projects, stakeholders, and vendor risks.

Deadline:
October 27, 2026
Issuer:
Nassau Community College
Location:
Garden City, New York, United States

Data Retention Assessment Service

A Philadelphia government authority is seeking a vendor to assess its records retention program, including physical and digital records practices and AI-related data retention. The engagement will produce actionable recommendations and implementation guidance for a one-year period.

Deadline:
October 28, 2026
Budget:
$75,000 – $150,000 (est.)
Issuer:
Philadelphia Gas Works
Location:
Philadelphia, Pennsylvania, United States

Supply Chain and Third-Party Vendor Risk Management Program Services

A Florida government authority is requesting information on vendor capabilities for a comprehensive supply chain and third-party vendor risk management program. Responses should address risk assessments, supplier monitoring, onboarding, reporting, governance workflows, audit trails, documentation, and training.

Deadline:
October 28, 2026
Issuer:
Jea
Location:
Jacksonville, Florida, United States

Managed Cybersecurity Services

A government authority in Philadelphia, Mississippi, seeks a managed cybersecurity services provider to deliver vCISO leadership, SOC monitoring, security engineering, policy support, incident response, and cybersecurity program improvements.

Deadline:
October 28, 2026
Issuer:
Neshoba County Board Of Supervisors
Location:
Philadelphia, Mississippi, United States

Privileged Access Management Service

The agency seeks a comprehensive privileged access management service to secure privileged credentials, enforce least-privilege access, and monitor activity across its IT environment. Required capabilities include credential vaulting, automated rotation, JIT access, MFA, remote access, session recording, reporting, hybrid cloud support, and high availability.

Deadline:
October 28, 2026
Budget:
$154,000
Issuer:
City Of Durham
Location:
Durham, North Carolina, United States

Privileged Access Management Software

The agency seeks a one-year Privileged Access Management solution to centralize and secure privileged access across human, service, application, machine, and vendor identities. The solution must support Zero Trust controls, credential security, monitoring, governance, and comprehensive auditability.

Deadline:
October 28, 2026
Issuer:
Alberta Pensions Services Corporation
Location:
Edmonton, Alberta, Canada

HIPAA Managed Compliance Services

Siskiyou County Public Health is seeking a qualified contractor to provide HIPAA managed compliance services, including advisory, governance, documentation, and reporting support.

Deadline:
October 30, 2026
Budget:
$50,000 – $150,000 (est.)
Issuer:
Siskiyou County Health & Human Services Agency, Public Health Division
Location:
Yreka, California, United States

Cloud-Delivered Secure Services Edge Solution

The issuing organization is seeking a cloud-delivered SSE platform and associated implementation services supporting ZTNA, SWG, CASB, and DLP. The solution must integrate across diverse agency environments and approved identity, security, networking, cloud, and monitoring systems.

Deadline:
October 30, 2026
Issuer:
State Of Oregon Department Of Administrative Services
Location:
Salem, Oregon, United States

Cybersecurity Assessment & Penetration Testing

The Regional Transit Authority of New Orleans is seeking qualified vendors to provide cybersecurity vulnerability assessment and penetration testing services.

Deadline:
November 3, 2026
Budget:
$25,000 – $75,000 (est.)
Issuer:
Regional Transit Authority
Location:
New Orleans, Louisiana, United States

Cybersecurity Assessment and Penetration Testing Services

A New Orleans government authority is seeking a qualified provider for comprehensive cybersecurity assessments, vulnerability mapping, penetration testing, remediation validation, reporting, and limited telephone support.

Deadline:
November 3, 2026
Issuer:
Regional Transit Authority
Location:
New Orleans, Louisiana, United States

Managed Secure Research Enclave and Compliance Services

A Clemson, South Carolina government authority seeks a provider for a managed secure research environment supporting controlled and export-controlled information. Services include technical administration, cybersecurity, and compliance support for approximately 50 research users.

Deadline:
November 6, 2026
Budget:
$500,000 – $1,500,000 (est.)
Issuer:
Clemson University
Location:
Clemson, South Carolina, United States

Cybersecurity Consulting Services

A Linden, New Jersey, government authority seeks a cybersecurity consulting partner for continuous security assessments, incident support, firewall and network security management, compliance reporting, and employee security awareness training. Critical-failure response must be available 24/7/365 within one hour.

Deadline:
November 6, 2026
Issuer:
City Of Linden
Location:
Linden, New Jersey, United States

Managed Governance, Risk, Compliance and Cybersecurity Program Management Services

Nassau Community College is seeking a qualified cybersecurity services partner to provide virtual Chief Information Security Officer (vCISO) services and active program management support.

Deadline:
November 12, 2026
Budget:
$150,000 – $300,000 (est.)
Issuer:
Nassau Community College
Location:
Garden City, New York, United States

Cybersecurity Penetration Test, Vulnerability Scan, and Risk Analysis Services

The Kissimmee Utility Authority is seeking proposals from qualified firms to provide cybersecurity penetration testing, vulnerability scanning, and risk analysis services.

Deadline:
November 17, 2026
Budget:
$100,000 – $250,000 (est.)
Issuer:
Kissimmee Utility Authority
Location:
Kissimmee, Florida, United States

Operational Technology Asset Discovery and Vulnerability Scanning Software

A three-year contract is sought for offline operational technology asset discovery and vulnerability scanning software. The solution must safely monitor OT, ICS, and supporting IT networks while providing asset approval workflows, segmented dashboards, and reporting capabilities.

Deadline:
November 18, 2026
Location:
Oklahoma, United States

Cybersecurity Risk Assessment Services for Water and Wastewater Systems

The City of Ogdensburg is seeking a cybersecurity risk assessment of its water and wastewater IT, OT, SCADA, and industrial control systems. Deliverables include vulnerability findings, prioritized remediation recommendations, and cost considerations for grant applications and capital planning.

Deadline:
November 20, 2026
Budget:
$45,000
Issuer:
City Of Ogdensburg
Location:
Ogdensburg, New York, United States

Lender Network Service

Ohio’s Small Business Clean Air Program is seeking financial institutions to participate as lenders and bond purchasers. The program will create a standardized financing network to improve access to affordable capital for small businesses.

Deadline:
June 30, 2027
Issuer:
Ohio Attorney General's Office
Location:
Columbus, Ohio, United States

Frequently asked questions

How many Cybersecurity & Data Privacy RFPs are open right now?
There are currently 29 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 16 of which were posted in the last 30 days. This page is refreshed hourly.
What budgets do Cybersecurity & Data Privacy RFPs have?
15 of the open listings disclose a budget, with a median of about $250,000. Disclosed budgets range from $25,000 to $99,900,000.
When is the next submission deadline for Cybersecurity & Data Privacy RFPs?
The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is October 26, 2026. Each listing page shows the full timeline, including question deadlines where published.

Other categories