Pen Testing Programme

Tender description

City College Plymouth are seeking quotations for a 3-5 year rolling plan of penetration testing / infrastructure security testing with 5 days testing per year. It is expected that years 1 and 2 of the testing programme would look at specific applications, then in year 3 we would want a more general black box test programme to test broader infrastructure security and finally in years 4 and 5 go back to looking at specific or new applications. Ideally as part of the 5 days in year 1 we would like some initial black box scanning of applications/services with then the focus to move onto testing 4 or 5 specific applications credentialed with firewall protections in place and then without to assess the base application security. Please see attached documentation on how to apply