Procurement Summary
Country: USA
Summary: NATO Business Opportunity Crowdsourced Black Box Web Penetration Testing BBPT of External Web Assets
Deadline: 30 Jan 2026
Posting Date: 14 Jan 2026
Other Information
Notice Type: Tender
TOT Ref.No.: 133646203
Document Ref. No.: RFQ-CO-424326-BBPT
Financier: Self Financed
Purchaser Ownership: Public
Tender Value: Refer Document
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
The NATO Communications and Information Agency (NCIA) intends to issue a Request for Quotation (RFQ) for the procurement of Crowdsourced Black Box Web Penetration Testing (BBPT) of External Web Assets.
Potential U.S. prime contractors must 1) maintain a professionally active facility (office, factory, laboratory, etc.) within the United States, 2) be pre-approved for participation in NATO Competitive Procurement (NCP), 3) be issued a Declaration of Eligibility (DOE) by the Department of Commerce (DOC), and 4) register with NCIA-s eProcurement tool, Neo: https://www.ncia.nato.int/business/procurement/neo-eprocurement
The reference for the RFQ is RFQ-CO-424326-BBPT and all correspondence concerning the RFQ should include this reference.
Competition Type: Lowest Price Technically Compliant
SUMMARY OF REQUIREMENT
The scope of the contract is to provide crowdsourced Black Box Web Penetration Testing (BBPT) of external web assets. The objective is to identify, report, and support the remediation of vulnerabilities, reducing NATO-s exposure to cyber threats.
The awarded Contractor shall provide all personnel, technology, and non-personal services required to conduct black-box penetration testing on NATO-s external web assets.
Contractor responsibilities include recruiting and managing vetted researchers, operating a secure testing platform, and adhering to reporting and security protocols.
In coordination with the NATO Cyber Security Centre (NCSC) Point of Contact, The Contractor shall conduct up to 10 (ten) time-boxed challenges of 90 (ninety) days each per year.
The prospective contract will be Firm-Fixed Price with a period of performance of one (1) year plus two (2) 12-month option periods.
BECOMING ELIGIBLE TO BID
If you have a NCIA DOE that can be used on other NCIA NCP opportunities, please submit the DOE to Ms. Line Sigh, Senior Contracting Officer, at RFQ-CO-424326-BBPT@ncia.nato.int
If you do not have a DOE that can be used o...
Notice ID: rfq-co-424326-bbpt
Department/Ind. Agency: commerce, department of
Sub-tier: bureau of industry and security
NAICS Code: 541519 - Other Computer Related Services
Inactive Dates: feb 09, 2026
Inactive Policy: manual
Documents
Tender Notice