request for proposal selection of agency (ies) for rate contract of web application security audit, vulnerability assessment, penetration testing and ict audit-2 web application security audit – static application 3 web application security audit – dynamic application (1 – 25 fields) 4 web application security audit – dynamic application (26 – 100 fields) 5 web application security audit – dynamic application (101 – 200 fields) 6 web application security audit – dynamic application (more than 200 fields) 7 vulnerability assessment of a physical server 8 vulnerability assessment of a virtual server 9 penetration testing of a physical server 10 penetration assessment of a virtual server 11 web application security audit for 1 year (audit will be done every quarter. no field count limitation) 12 ict infrastructure with 20 end points 13 ict infrastructure with 21 to 50 end points 14 ict infrastructure with 51 to 100 end points 15 ict infrastructure with 101 to 200 end points 16 network security audit having less than 10 end points 17 network security audit having more than 10 end points