Request for Expression of interest for Penetration Testing Services

COPEDU Plc is seeking proposals from qualified and experienced firms to provide penetration testing services. The objective of this engagement is to assess the security posture of our digital assets, including web applications, mobile applications, and network infrastructure, to identify and mitigate potential vulnerabilities and security risks.

The scope of the project includes, but is not limited to, the following:

• Penetration testing of COPEDU Plc web applications and external-facing applications.
• Penetration testing of COPEDU Plc mobile applications, targeting both Android and iOS platforms.
• Network penetration testing to identify vulnerabilities in COPEDU Plc network infrastructure.
• Assessment of wireless network security, including COPEDU Plc Wi-Fi networks.
• Reporting and documentation of all identified vulnerabilities, including recommendations for remediation.
• SSL Testing
• Dos Testing
• Data validation testing
• Session management testing
• Authentication management testing
• Third-party dependencies testing
• Insider threats testing

Deliverables:

The selected companies will be required to provide the following deliverables:

• Detailed penetration testing reports outlining identified vulnerabilities, their severity, and potential impact.
• Remediation recommendations prioritized based on risk severity.
• Executive summary highlighting key findings and recommendations.
• Post-engagement support for clarification of findings and assistance with remediation efforts, if required.

Proposal Submission:

Proposals should include the following:

• Company profile highlighting relevant experience and qualifications.
• Description of methodology and approach to penetration testing.
• Proposed timeline and deliverables schedule.
• References from previous clients/projects.
• Any additional information deemed relevant to the proposal.
• RDB Certificate
• RRA Tax clearance

Only shortlisted Companies will be contacted to provide financial proposals.

Expression of interest must be delivered to the Head office of COPEDU PLC, not later than May 13, 2024, at 03:00 PM

Done at Kigali on 30^th April 2024

Nyangezi Joseph 

Head of operations

Muyango Raïssa

Managing Director