St. Johns County Demandstar #QR-Misc 2961-0-2026/KM

St. Johns County Seeks Annual Cybersecurity Vulnerability and Web Application Scanning Services

St. Johns County Purchasing Department is seeking annual cybersecurity scanning services to protect its public-facing infrastructure. - Government Buyer: - St. Johns County Purchasing Department - Products/Services Requested: - Annual external vulnerability assessments - Web application scanning services - Services include: - Comprehensive, non-destructive security scanning of external IP addresses and web applications - Identification and assessment of vulnerabilities and misconfigurations - Severity scoring using industry-standard methodologies - Contextual threat intelligence analysis - Validation to reduce false positives - Historical vulnerability tracking - Detailed reporting with actionable remediation recommendations - Unique/Notable Requirements: - Assessments must be timely, accurate, and repeatable - Support for the County’s cybersecurity program, risk management, and compliance with public sector security standards - No specific OEMs or vendors are named in the solicitation; open to qualified cybersecurity service providers

Description

St. Johns County is soliciting quotes from qualified cybersecurity service providers to perform annual external vulnerability assessments and web application scanning services on an as-needed basis. The services include comprehensive, non-destructive security scanning of the County's public-facing infrastructure, including external IP addresses and web applications, to identify, assess, and prioritize potential security vulnerabilities and misconfigurations. The supplier must provide vulnerability identification, severity scoring, threat intelligence analysis, validation to reduce false positives, historical vulnerability tracking, and detailed reporting with actionable remediation recommendations. The assessments must support the County's cybersecurity program, risk management efforts, and compliance with applicable public sector security standards and best practices.

View original listing