Open Cybersecurity & Data Privacy RFPs

Security assessments, penetration testing, SOC services, compliance audits, and privacy program work. Expect requirements around certifications (CISSP, SOC 2, FedRAMP) and incident response capabilities.

Cybersecurity & Data Privacy RFPs by service

Open RFPs
56
Posted in last 30 days
46
Median disclosed budget
$1,700,000
Next deadline
August 25, 2026

Updated hourly from the Settle RFP Hunter database.

Most active issuers

  • Ohio Attorney General's Office (2)
  • Department Of The Air Force, Air Force Materiel Command, Air Force Research Laboratory (2)
  • California Department of Technology (1)
  • Chicago Housing Authority (1)
  • Capital Regional District (1)

Swimlane Turbine Cloud Platform Subscription and Implementation Services

The agency is seeking a vendor for a three-year Swimlane Turbine Cloud Platform subscription, implementation, premium support, automation configuration, and reporting services. Work includes tenant onboarding, security operations use cases, integrations, knowledge transfer, and compliance reporting.

Deadline:
August 25, 2026
Issuer:
Chicago Housing Authority
Location:
Chicago, Illinois, United States

Next Generation Cybersecurity and Information Assurance Services

A Florida government authority is seeking sources capable of delivering enterprise-wide cybersecurity and information assurance services across on-premises, cloud, and tactical-edge environments. The scope includes secure-by-design engineering, continuous monitoring, DevSecOps, threat intelligence, compliance, and cybersecurity innovation.

Deadline:
August 25, 2026
Issuer:
Naval Surface Warfare Center, Panama City Division
Location:
Panama City, Florida, United States

Automated Redaction Software

An Ontario-based information request is seeking insight into automated redaction software that can identify and redact PI, PHI, and other sensitive content. The focus is on solution capabilities, implementation models, pricing, privacy compliance, and auditability.

Deadline:
August 25, 2026
Issuer:
Ontario Health
Location:
Ontario, Canada

Innovative Commercial Products and Solutions

The agency is seeking innovative software products and services spanning development, integration, delivery, observability, automation, cybersecurity, and resilient platform operations. Solutions may incorporate artificial intelligence, machine learning, and automated security and risk-management capabilities.

Deadline:
August 26, 2026
Location:
California, United States

Fiber GIS Asset Management Software

The procuring organization is seeking a fiber-focused GIS asset management platform for mapping, lifecycle tracking, integration, and potential migration of legacy infrastructure data. The contract term is one year, with questions due August 17, 2026 and proposals due August 26, 2026.

Deadline:
August 26, 2026
Issuer:
Princeton University
Location:
Princeton, New Jersey, United States

Payment Card Industry Data Security Standard Compliance Services

A New York government authority seeks a PCI DSS compliance services provider for a three-year engagement. The work includes gap assessments, remediation guidance, merchant and payment gateway support, policy updates, training, vulnerability research, and ongoing advisory services.

Deadline:
August 26, 2026
Issuer:
The City University Of New York
Location:
New York, New York, United States

Managed Security Provider Services

A government agency in Columbus, Ohio is procuring managed security provider services to strengthen and operate its cybersecurity program. The three-year contract includes 24/7/365 support across governance, monitoring, response, recovery, and overall security program improvement.

Deadline:
August 26, 2026
Budget:
$150,000 – $450,000 (est.)
Issuer:
Columbus Regional Airport Authority
Location:
Columbus, Ohio, United States

vCISO Support Services

A San Mateo, California government authority is seeking a firm to provide five years of vCISO support services. Work includes cybersecurity governance, risk assessment, policy development, incident response planning, vendor risk oversight, and security program advisory services.

Deadline:
August 26, 2026
Issuer:
City Of East Palo Alto
Location:
East Palo Alto, California, United States

CrowdStrike Renewal Service

The procuring organization seeks a vendor to provide CrowdStrike renewal services on an as-needed basis. Questions are due August 24, 2026, and proposals are due August 27, 2026.

Deadline:
August 27, 2026
Issuer:
Ohio Attorney General's Office
Location:
Columbus, Ohio, United States

Cyber Security Consultancy and Technical Services

A four-year engagement for cyber security consultancy and technical services supporting risk management, resilience, AI and SaaS security, incident response, and compliance with NIS2, CyFun, and Ireland’s National Cyber Security Bill 2024.

Deadline:
August 27, 2026
Budget:
$1,400,000
Issuer:
Department Of Children Disability And Equality
Location:
Dublin, Ireland

Cybersecurity Governance, Risk and Compliance Solution

A Florida-based utility organization is seeking a cybersecurity GRC solution to manage enterprise risk across IT, business operations, and third-party relationships. The project includes implementation, licensing, support, training, hardening, and ongoing environment management.

Deadline:
August 27, 2026
Budget:
$100,000 – $500,000 (est.)
Issuer:
Orlando Utilities Commission
Location:
Orlando, Florida, United States

DOJ Software as a Service Log Management and SIEM Solution

The U.S. Department of Justice is requesting information on a SaaS-based log management and SIEM solution. Detailed requirements are included in the attached RFI document.

Deadline:
August 28, 2026
Location:
United States

Security Awareness and Phishing Simulation Platform

The organization seeks a security awareness platform with AI-generated phishing scenarios, automated campaigns, deepfake and vishing simulations, targeted remediation, and Google Workspace integration. Questions are due August 21, 2026, and the proposal deadline is August 28, 2026.

Deadline:
August 28, 2026
Issuer:
Oswego Community Unit School District 308
Location:
Oswego, Illinois, United States

Cyber Security Consultancy Services

This opportunity seeks a cyber security consultancy provider to develop inspection methodologies, risk-based assessment processes, maturity assessments, and supporting templates. The work must address security considerations for cloud systems, remote work, and third-party tools.

Deadline:
August 28, 2026
Issuer:
Health Products Regulatory Authority
Location:
Ireland

Vulnerability Scanning and Patching Solution

The organization seeks an integrated vulnerability assessment, asset discovery, compliance reporting, remediation tracking, and patch management solution. The engagement covers requirements validation, architecture, implementation, integrations, migration, training, and documentation.

Deadline:
August 28, 2026
Budget:
$70,000
Issuer:
Capital Regional District
Location:
Victoria, British Columbia, Canada

Managed Email Security Solution

The organization seeks a vendor to deliver a managed email security solution with threat detection, identity protection, automated response, and 24x7 SOC coverage. The solution must defend against malware, ransomware, malicious attachments, and account compromise.

Deadline:
August 28, 2026
Issuer:
Housing Authority Of The Cherokee Nation
Location:
Tahlequah, Oklahoma, United States

Cybersecurity Awareness and Training Platform

An organization is seeking an AI-enabled, customizable platform for cybersecurity awareness and training. The solution should support continuous human risk reduction beyond traditional compliance-focused programs.

Deadline:
August 28, 2026
Location:
New Jersey, United States

Security Risk Assessment and Management Software

A Kansas county is seeking security risk assessment and management software, including implementation, maintenance, and support. The solution must support third-party risk management workflows, vendor inventory, and risk tracking for vendors handling sensitive data.

Deadline:
August 28, 2026
Issuer:
Johnson County
Location:
Olathe, Kansas, United States

Next Generation Firewall and Secure Web Gateway Service

The organization is seeking a three-year service for globally deployed next-generation firewall and secure web gateway capabilities. The solution must support physical and virtual appliances, advanced threat protection, centralized administration, long-term logging, SIEM integration, and enterprise cloud and SD-WAN environments.

Deadline:
August 31, 2026
Location:
New York, United States

Cloud-Hosted Google Workspace Backup Solution

The city seeks a cloud-to-cloud Google Workspace backup and recovery platform covering Gmail, Google Drive, and Google Chat. The solution must provide 10-year retention, e-discovery and public-records support, advanced search, automated backups, and rapid restoration.

Deadline:
August 31, 2026
Issuer:
City Of Asheville
Location:
Asheville, North Carolina, United States

Governance, Risk, and Compliance Solution

The organization is seeking a centralized, scalable governance, risk, and compliance solution to strengthen cybersecurity risk management and compliance tracking. The opportunity is provided for information purposes only, and the main RFP document is not available.

Deadline:
August 31, 2026
Issuer:
Ministry Of Saskbuilds And Procurement
Location:
Saskatchewan, Canada

Information Security Services

A Sacramento government authority seeks a full-service information security team for a five-year engagement. The work includes security operations, governance and compliance, risk management, data protection, and support for emerging security initiatives.

Deadline:
August 31, 2026
Budget:
$2,500,000 – $12,500,000
Issuer:
Covered California
Location:
Sacramento, California, United States

Global Cybercrime and Cryptocurrency Assessment and Intelligence Gathering Service

A Washington, DC government authority seeks intelligence gathering and assessment services focused on global cybercrime and the misuse of cryptocurrency. Deliverables include baseline assessments, global heat maps, situational updates, and actionable intelligence packages covering online fraud, drug trafficking, and digital piracy.

Deadline:
August 31, 2026
Budget:
$200,000 – $1,700,000
Issuer:
U.S. Department of State, Bureau of International Narcotics and Law Enforcement Affairs
Location:
United States

Strategic Cyber Tools Buying Service

The agency is seeking vendors to provide strategic cybersecurity tools procurement, advisory, acquisition, and enterprise license management services. The scope also includes procurement analytics, a web-based monitoring application, and cybersecurity workforce training.

Deadline:
September 1, 2026
Budget:
$600,000,000 – $2,147,483,647
Issuer:
General Services Administration
Location:
Denver, Colorado, United States

Frequently asked questions

How many Cybersecurity & Data Privacy RFPs are open right now?
There are currently 56 open Cybersecurity & Data Privacy RFPs tracked by Settle RFP Hunter, 46 of which were posted in the last 30 days. This page is refreshed hourly.
What budgets do Cybersecurity & Data Privacy RFPs have?
13 of the open listings disclose a budget, with a median of about $1,700,000. Disclosed budgets range from $25,000 to $2,147,483,647.
When is the next submission deadline for Cybersecurity & Data Privacy RFPs?
The soonest submission deadline among open Cybersecurity & Data Privacy RFPs is August 25, 2026. Each listing page shows the full timeline, including question deadlines where published.

Other categories