Inactive

The Centers for Disease Control and Prevention intends to award a sole source firm fixed price purchase order to Red River Technology LLC for the purchase of the Penetration testing of CDC/LB MicrobeT... The Centers for Disease Control and Prevention intends to award a sole source firm fixed price purchase order to Red River Technology LLC for the purchase of the Penetration testing of CDC/LB MicrobeTrace software. The National Center for HIV/AIDS, Viral Hepatitis, STD, and TB Prevention (NCHHSTP) has a need for penetration testing of CDC/LB Microbe Trace software. The vendor will be expected to perform the following tasks: 1. Conduct special Project Crowdsourced Penetration Test 2. Perform custom Mission Campaigns to drive unique researcher testing of product based on review of code base, functionality, and logic of the local session to identify vulnerabilities 3. Verify whether or not this malicious payload could be passed to other users utilizing this same application to see if those users could be exploited by the local functionality of the application. 4. Create Client Portal Access to track progress and identified vulnerabilities during assessment. 5. Provide full detailed write up of any vulnerabilities identified during the process of the assessment, including Actions to Exploit. 6. Provide detailed and customized report showcasing testing methodology, missions, vulnerabilities (if any are found), and the detailed write-up of those, including potential solutions to the vulnerabilities The period of performance is August 23, 2021 – December 23, 2021. As Red River performs the current SynAck CDC IT security work, they provide a trusted model of using crowd sourcing to conduct sensitive penetration testing of national IT resources. The SynAck platform used by Red River provides users more control, visibility and more protection than other open source tools used by other companies. This contract action is for supplies or services for which the Government intends to solicit and negotiate with only one source under the authority of FAR 13.106-1(b) (SAP) and 10 U.S.C. 2304(c)(1). Interested persons may identify their interest and capability to respond to the requirement or submit proposals. This notice of intent is not a request for competitive quotations; however, all quotations/responses received within fifteen (15) calendar days of the issuance of this notice will be considered by the government. A determination by the government not to compete this proposed contract based upon responses to this notice is solely within the discretion of the government. Information received will normally be considered solely for the purpose of determining whether to conduct a competitive procurement. Any quotation/response should be emailed to Contract Specialist at PYX9@cdc.gov by 10:00AM ET on August 16, 2021.