Every open RFP, analyzed by Settle

The Kissimmee Utility Authority is seeking proposals from qualified firms to provide cybersecurity penetration testing, vulnerability scanning, and risk analysis services.

Siskiyou County Public Health is seeking a qualified contractor to provide HIPAA managed compliance services, including advisory, governance, documentation, and reporting support.

Lincoln Electric System is seeking proposals for corporate and physical penetration testing services.

A Clemson, South Carolina government authority seeks a provider for a managed secure research environment supporting controlled and export-controlled information. Services include technical administration, cybersecurity, and compliance support for approximately 50 research users.

A Philadelphia government authority is seeking a vendor to assess its records retention program, including physical and digital records practices and AI-related data retention. The engagement will produce actionable recommendations and implementation guidance for a one-year period.

A Linden, New Jersey, government authority seeks a cybersecurity consulting partner for continuous security assessments, incident support, firewall and network security management, compliance reporting, and employee security awareness training. Critical-failure response must be available 24/7/365 within one hour.

A Florida government authority is requesting information on vendor capabilities for a comprehensive supply chain and third-party vendor risk management program. Responses should address risk assessments, supplier monitoring, onboarding, reporting, governance workflows, audit trails, documentation, and training.

The City of Ogdensburg is seeking a cybersecurity risk assessment of its water and wastewater IT, OT, SCADA, and industrial control systems. Deliverables include vulnerability findings, prioritized remediation recommendations, and cost considerations for grant applications and capital planning.

A government authority in Philadelphia, Mississippi, seeks a managed cybersecurity services provider to deliver vCISO leadership, SOC monitoring, security engineering, policy support, incident response, and cybersecurity program improvements.

An Ontario government authority seeks cybersecurity expertise for network vulnerability assessments, penetration testing, segmentation reviews, device hardening, physical security evaluations, social engineering campaigns, and logging assessments.

The issuing organization is seeking a cloud-delivered SSE platform and associated implementation services supporting ZTNA, SWG, CASB, and DLP. The solution must integrate across diverse agency environments and approved identity, security, networking, cloud, and monitoring systems.

Nassau Community College is seeking a qualified cybersecurity services partner to provide virtual Chief Information Security Officer (vCISO) services and active program management support.

A government authority in Garden, New York, is seeking managed services to strengthen cybersecurity governance, risk and compliance management, asset inventories, remediation oversight, and executive reporting. The consultant will actively manage cybersecurity programs, projects, stakeholders, and vendor risks.

A New Orleans government authority is seeking a qualified provider for comprehensive cybersecurity assessments, vulnerability mapping, penetration testing, remediation validation, reporting, and limited telephone support.

The government authority in the United States Virgin Islands is seeking a managed detection and response provider to deliver continuous monitoring, threat detection, investigation, and incident response support. The provider must integrate with the existing cybersecurity environment and support regulatory and operational resilience objectives.

The agency seeks a comprehensive privileged access management service to secure privileged credentials, enforce least-privilege access, and monitor activity across its IT environment. Required capabilities include credential vaulting, automated rotation, JIT access, MFA, remote access, session recording, reporting, hybrid cloud support, and high availability.

The Bureau of Information Technology of the Government of the U.S. Virgin Islands is seeking a provider for managed cybersecurity services, including continuous monitoring, threat detection, and incident response support.

The Regional Transit Authority of New Orleans is seeking qualified vendors to provide cybersecurity vulnerability assessment and penetration testing services.

The organization seeks cybersecurity expertise to adopt CSF 2.0, consolidate current-state assessments, and advance cybersecurity maturity. Deliverables include a prioritized gap analysis, multi-year roadmap, policy development, control implementation, Microsoft-integrated metrics, and staff enablement.

The agency seeks a SaaS enterprise backup and recovery provider capable of protecting at least 1,000 entities across virtualized, cloud, database, and physical server environments. The engagement includes implementation, proof-of-concept testing, recovery validation, and ongoing support.

The agency seeks a one-year Privileged Access Management solution to centralize and secure privileged access across human, service, application, machine, and vendor identities. The solution must support Zero Trust controls, credential security, monitoring, governance, and comprehensive auditability.

A three-year contract is sought for offline operational technology asset discovery and vulnerability scanning software. The solution must safely monitor OT, ICS, and supporting IT networks while providing asset approval workflows, segmented dashboards, and reporting capabilities.

The agency seeks one FortiGate firewall license for existing equipment under an E-Rate-supported service requirement. Vendor questions are due September 18, 2026, and proposals are due October 26, 2026.

Ohio’s Small Business Clean Air Program is seeking financial institutions to participate as lenders and bond purchasers. The program will create a standardized financing network to improve access to affordable capital for small businesses.