Request for Proposals: Penetration Testing Consultancy for the Tiko Platform

Conduct a comprehensive penetration test on the Tiko platform to identify security vulnerabilities and provide actionable remediation recommendations.

• Perform security assessments on Android mobile application, web interfaces, APIs, backend services, databases, and server infrastructure.
• Deliver a detailed vulnerability assessment report with executive summary, technical findings, severity levels, and remediation steps.
• Provide post-engagement support and retesting of remediated critical and high-severity vulnerabilities.

This consultancy helps Tiko Africa protect its digital platform, which empowers young women and adolescent girls in Africa to access sexual and reproductive health services and economic opportunities. By securing the platform, the role ensures user data privacy and system integrity, enabling continued positive impact on thousands of lives.

• Proven experience in penetration testing of mobile applications, web applications, and backend systems.
• Expertise in OWASP testing methodologies and common vulnerability identification (injection flaws, authentication bypass, insecure data storage).
• Ability to produce clear, actionable reports with executive summaries and technical details.
• Relevant certifications (e.g., OSCP, CEH) and team member CVs demonstrating capability.

Consultancy contract with a recognized company. Detailed cost breakdown required in proposal. No specific salary or benefits mentioned.

Tiko Africa uses a digital platform to motivate young women and adolescent girls to make positive health choices and become entrepreneurs, operating in Kenya, Uganda, Ethiopia, Burkina Faso, and South Africa.