Technology Agreement CompuNet, Inc.

CompuNet Inc • city of Everett Application Security Assessment ENGAGEMENT SUMMARY This Statement of Work ("SOW") is made as of 05/27/2021 (the "Effective Date") by and between City of Everett ("Customer") and CompuNet, Inc. This SOW is made a part of and is subject to the Terms and Conditions (Appendix A). Collectively, this SOW, and Appendix A are referred to as the "Agreement." CompuNet, Inc. will provide services to Customer under this Agreement as further described below. Overview Of Services Executive Summary Applications are at the heart of today's increase in security breaches, and bad actors don't discriminate and are consistently targeting all industries and verticals. Applications are the foundation of how we live, work, and interact with our co-workers, employees, and customers. Although companies are placing a tremendous focus on application security, severe gaps still exist in visibility, understanding, organization, and knowledge of where and what to apply attention and resources. The first step in approaching Application Security is to gain a detailed account of the application landscape and its vulnerabilities and potential attack surface. By understanding this, you can begin mitigation strategies and prioritizing remediation efforts. CompuNet has recognized the shared challenge that our customers are unsure where to start with Application Security. CompuNet has developed a high-impact, consultative engagement providing our customers with an Application Security Assessment to address this overwhelming need. Our Application Security experts will engage in an assessment that involves workshop interviews, scoping then performing application discovery and vulnerability scanning. Following the discovery and scanning, our engineers will analyze the scan, summarize and document the resulting information into a detailed assessment that provides a consolidated understanding of the Application Security landscape, actionable recommendations, along with a prioritized list of Low, Medium, and High liability vulnerabilities. There is a challenge of offering services to customers while also maintaining a secure web application. Customers understand the importance of reducing their attack surface area but often lack a direction. The web application security scanner crawls the running web applications to create a site map with all of the pages, links, and forms for testing. With the map completed, it interrogates the site to identify any application vulnerabilities and produces a detailed report. CompuNet prepares an Application Security Assessment that includes remediation and recommendations for the vulnerabilities found in the scan. Project Overview CompuNet's Web Application Assessment engagements begin with our Discovery Workshop, where we'll SOW* 102295 - Revision #1 Seattle, WA I (206) 456-9133 www.compunet.biz TI7 s r%ocument is PROPRIETARY and SENSITIVE and may not be duplicated redistributed or displayed to any other party without the expressed written permission of CornpuNet,Inc.An automatic exception is granted to public entities.