Broad-Based Black Economic Empowerment Act (B-BBEE Act)
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Documents available on tender detail page
Tender Type
Request for Quotation
Delivery Location
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Organization Type
GOVERNMENT
Published
25 Aug 2026
OCDS Reference
ocds-9t57fa-166819
South african airways (saa) invites quotations for the supply, licensing, implementation, and configuration of the qualys vulnerability management, detection and response (vmdr) trurisk platform. The contract will be governed by saa's general conditions of contract, which include requirements for performance security, warranties, and compliance with tax and other legal obligations.
Bidders must furnish a performance security within 30 days of contract award, in the amount specified in the Special Conditions of Contract.
Bidders must submit an original tax clearance certificate issued by the South African Revenue Services prior to contract award.
The supplier must warrant that all goods are new, unused, and free from defects for 12 months after delivery or 18 months after shipment, whichever ends earlier.
The supplier must comply with the National Industrial Participation (NIP) Programme if applicable.
The supplier must not engage in collusive bidding or restrictive practices as prohibited by the Competition Act.
The supplier must deliver goods and perform services according to the time schedule in the contract; delays may incur penalties calculated at the prime interest rate per day.
The contract will be written in English and interpreted under South African law.
Categories
Request for Quotation
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Tenders in this industry often require registration with these bodies.
Recommended Certifications
Having these can improve your winning chances: IITPSA Membership, ISO 27001 (Information Security Management), ISO 20000 (IT Service Management), CISSP
AI Document Analysis Stages
Important Dates
25 Aug
2026
Tender Published
Tender was published
31 Aug
2026
Closing Date
Tender closing date
These references help suppliers understand the public-procurement framework around this opportunity. They are generated from the tender category, issuing organisation type and procurement context.
These rules commonly apply to South African public-sector procurement.
Act 53 of 2003
Provides the empowerment-compliance context often used in public-sector supplier evaluation.
Relevant because this is a South African public-sector procurement opportunity.
Act 108 of 1996 (s217)
This is general procurement context, not legal advice. Always verify requirements in the official tender documents and issuing authority notices.
Annexure 3 - SAA General conditions of contract.pdf
RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf
South African Airways (Pty) Limited is requesting a quotation for the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive of Policy Compliance (PC) and Web Application Scanning (WAS). The solution must provide a minimum of 3,400 VMDR vulnerability management licenses to cover SAA’s current asset population.
Annexure 2 - SBD 4.pdf
South African Airways (Pty) Limited is requesting a quotation for the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform.
Annexure 1 - Vendor application Local.pdf
South African Airways (Pty) Limited is requesting quotations for the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform. The closing date for submissions is 31 August 2026 at 16:00 UTC.
To download these documents and access AI-powered analysis, visit the main tender page.
Organization
South African Airways (Pty) LimitedAddress
32 Jones Road, Airways Park, Johannesburg (Head Office) - Kempton Park - Isando - 1627
Win SAA tenders with AI Discovery, aviation intelligence, compliance gap analysis, and structured application support for aeronautical contracts.
Matched by category & region
Free guidance to prepare before you bid
Not sure if your business is ready for this tender? Check CSD, CIDB, and B-BBEE requirements, run a readiness assessment, and move from opportunity to submission.
Open Supplier Readiness HubMedian Estimate
R 2 352 363
Range
Based on 25 comparable awarded tenders. Companies with similar profiles typically bid near the median.
* Estimates are based on historical data and do not guarantee actual award values.
We refine every tender document through these stages so you can brief your team and prepare your bid with confidence. Anything marked as "in progress" will be upgraded automatically — no action required from you.
{"closingDate":"31 August 2026","closingTime":"16:00pm"}
Contact Information
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ){"name":"Global Supply Management","email":"[email protected]","phone":null,"department":"Global Supply Management","address":null}
Submission Guidelines
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)Bidders must submit quotations before the specified closing date and time. If the quotation is late, it will not be considered. The submission method is via email to [email protected]. The maximum size of documents that can be sent via the email box at once is 2MB. If files exceed this size, bidders must send them in parts or provide a downloadable link.
Evaluation Criteria
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)The contract shall be awarded at SAA's sole and absolute discretion. SAA hereby states that it is not compelled to award this quotation to any bidder. SAA has the right to withdraw this quotation at any time from the date of issuance. SAA is not obligated to accept the lowest quotation, offer, or proposal. All quotations will be evaluated according to the criteria, weightings, and threshold scores as indicated in 2.2 below. The evaluation stages include Administrative, Substantive, Technical, and Specific Goals assessment.
Technical Specifications
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)The scope of work includes the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive of Policy Compliance (PC) and Web Application Scanning (WAS), for South African Airways (SAA). The solution must provide a minimum of 3,400 VMDR vulnerability management licenses to cover SAA’s current asset population.
Methodology
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdfThe solution must include the following VMDR TruRisk capabilities: Deployment and operation of Qualys Cloud Agents for continuous vulnerability and configuration assessment, Asset inventory, discovery, tagging, and classification to ensure accurate asset visibility and risk contextualisation.
Experience & Qualifications
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdfThe proponent must demonstrate proven experience in delivering enterprise vulnerability management, configuration compliance, and/or web application security solutions at an organisational scale comparable to SAA.
Financial Requirements
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)All prices provided must be exclusive of Value Added Tax (VAT). All prices submitted must be firm. 'Firm' prices are deemed fixed and are only subject to the following statutory changes: VAT.
Compliance Requirements
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)Bidders must be a South African registered entity, or a legally recognized local partner/reseller authorized to deliver Qualys solutions within South Africa. Company registration documents must be provided. The bidder must be a Qualys accredited partner or an authorised reseller with demonstrable experience in the supply, implementation, and configuration of Qualys VMDR TruRisk, Policy Compliance, and Web Application Scanning (WAS) within enterprise environments.
Requirements
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdf (RFQ)To be eligible to present a proposal and deliver the scope of work outlined above, the proponent shall meet the following minimum requirements: The proponent must be a Qualys accredited partner or an authorised reseller with demonstrable experience in the supply, implementation, and configuration of Qualys VMDR TruRisk, Policy Compliance, and Web Application Scanning (WAS) within enterprise environments. Evidence of accreditation or authorisation must be provided as part of the proposal submission.
Section
Source: RFQ-GSM061-2026 Request for Quotation for supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform, inclusive.pdfThe evaluation stages include Administrative, Substantive, Technical, and Specific Goals assessment. All quotations will be evaluated according to the criteria, weightings, and threshold scores as indicated in 2.2 below.
Evaluation Criteria
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)cancelling the contract, be entitled to purchase supplies of a similar quality and up to the same quantity in
Technical Specifications
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)provisions in the SCC shall prevail.
Table of clauses
Quality Management
Source: Annexure 3 - SAA General conditions of contract.pdf4.1 The goods supplied shall conform to the standards mentioned in the bidding documents and specifications.
5.1 The supplier shall not, without the purchaser’s prior written consent, disclose the contract, or any provision
thereof, or any specification, plan, drawing, pattern, sample, or information furnished by or on behalf of the
purchaser in connection therewith, to any person other than a person employed by the supplier in the
performance of the contract. Disclosure to any such employed person shall be made in confidence and
shall extend only so far as may be necessary for purposes of such performance.
5.2 The supplier shall not, without the purchaser’s prior written consent, make use of any document or
information mentioned in GCC clause 5.1 except for purposes of performing the contract.
5.3 Any document, other than the contract itself mentioned in GCC clause 5.1 shall remain the property of the
purchaser and shall be returned (all copies) to the purchaser on completion of the supplier’s performance
under the contract if so required by the purchaser.
5.4 The supplier shall permit the purchaser to inspect the supplier’s records relating to the performance of the
supplier and to have them audited by auditors appointed by the purchaser, if so required by the purchaser.
8.1 All pre-bidding testing will be for the account of the bidder.
8.2 If it is a bid condition that supplies to be produced or services to be rendered should at any stage during
production or execution or on completion be subject to inspection, the premises of the bidder or contractor
shall be open, at all reasonable hours, for inspection by a representative of the Department or an
organization acting on behalf of the Department.
8.3 If there are no inspection requirements indicated in the bidding documents and no mention is made in the
contract, but during the contract period it is decided that inspections shall be carried out, the purchaser shall
itself make the necessary arrangements, including payment arrangements with the testing authority
concerned.
8.4 If the inspections, tests and analyses referred to in clauses 8.2 and 8.3 show the supplies to be in
accordance with the contract requirements, the cost of the inspections, tests and analyses shall be defrayed
by the purchaser.
8.5 Where the supplies or services referred to in clauses 8.2 and 8.3 do not comply with the contract
requirements, irrespective of whether such supplies or services are accepted or not, the cost in connection
with these inspections, tests or analyses shall be defrayed by the supplier.
8.6 Supplies and services which are referred to in clauses 8.2 and 8.3 and which do not comply with the contract
requirements may be rejected.
8.7 Any contract supplies may on or after delivery be inspected, tested or analyzed and may be rejected if found
not to comply with the requirements of the contract. Such rejected supplies shall be held at the cost and
risk of the supplier who shall, when called upon, remove them immediately at his own cost and forthwith
substitute them with supplies which do comply with the requirements of the contract.
8.8 Failing such removal the rejected supplies shall be returned at the suppliers cost and risk. Should the
supplier fail to provide the substitute supplies forthwith, the purchaser may, without giving the supplier
further opportunity to substitute the rejected supplies, purchase such supplies as may be necessary at the
expense of the supplier.
8.9 The provisions of clauses 8.4 to 8.7 shall not prejudice the right of the purchaser to cancel the contract on
account of a breach of the conditions thereof, or to act in terms of Clause 23 of GCC.
Compliance Requirements
Source: Annexure 3 - SAA General conditions of contract.pdf (TENDER)No specific requirements found
Health & Safety
Source: Annexure 3 - SAA General conditions of contract.pdf3.1 Unless otherwise indicated in the bidding documents, the purchaser shall not be liable for any expense
incurred in the preparation and submission of a bid. Where applicable a non-refundable fee for documents
may be charged.
3.2 With certain exceptions, invitations to bid are only published in the Government Tender Bulletin. The
Government Tender Bulletin may be obtained directly from the Government Printer, Private Bag X85,
Pretoria 0001, or accessed electronically from www.treasury.gov.za
24.1 When, after the date of bid, provisional payments are required, or antidumping or countervailing duties are
imposed, or the amount of a provisional payment or anti-dumping or countervailing right is increased in
respect of any dumped or subsidized import, the State is not liable for any amount so required or imposed,
or for the amount of any such increase. When, after the said date, such a provisional payment is no longer
required or any such anti-dumping or countervailing right is abolished, or where the amount of such
provisional payment or any such right is reduced, any such favourable difference shall on demand be paid
forthwith by the contractor to the State or the State may deduct such amounts from moneys (if any) which
may otherwise be due to the contractor in regard to supplies or services which he delivered or rendered, or
is to deliver or render in terms of the contract or any other contract or any other amount which may be due
to him.
31.1 Every written acceptance of a bid shall be posted to the supplier concerned by registered or certified mail
and any other notice to him shall be posted by ordinary mail to the address furnished in his bid or to the
address notified later by him in writing and such posting shall be deemed to be proper service of such notice
31.2 The time mentioned in the contract documents for performing any act after such aforesaid notice has been
given, shall be reckoned from the date of posting of such notice.
Contractual Terms
Source: Annexure 3 - SAA General conditions of contract.pdfThe document is the General Conditions of Contract (GCC) for South African government procurement. It sets out standard terms governing bids, contracts and orders, including definitions, application, standards, use of contract documents, patent rights, performance security, inspections, packing, delivery, insurance, transportation, incidental services, spare parts, warranty, payment, prices, contract amendments, assignment, subcontracts, delays, penalties, termination for default, anti-dumping and countervailing duties, force majeure, termination for insolvency, dispute settlement, limitation of liability, governing language, applicable law, notices, taxes and duties, the National Industrial Participation Programme, and prohibition of restrictive practices. It also specifies that the Special Conditions of Contract (SCC) prevail in case of conflict, and that the contract is governed by South African law and written in English.
Submission Guidelines
Source: Annexure 2 - SBD 4.pdf (TENDER)Returnable documents: SBD 4 (Bidder's Disclosure) must be completed, signed, and submitted with the quotation. The form requires disclosure of any employment by an organ of state, relationships with employees of the procuring institution, and interests in other CSD-registered enterprises. Failure to disclose all CSD-registered active companies linked to directors will lead to disqualification. The bid will be disqualified if the disclosure is found to be false.
Evaluation Criteria
Source: Annexure 2 - SBD 4.pdf (TENDER)The bidder must not be listed in the Register for Tender Defaulters and/or the List of Restricted Suppliers. The bidder must comply with principles of transparency, accountability, impartiality, and ethics as enshrined in the Constitution. Bids that are suspicious will be reported to the Competition Commission for investigation and possible administrative penalties, and may be referred to law enforcement or restricted from doing business with the state for up to 10 years.
Compliance Requirements
Source: Annexure 2 - SBD 4.pdf (TENDER)SBD 4 (Bidder's Disclosure) must be completed and signed. The bidder must not be listed in the Register for Tender Defaulters or the List of Restricted Suppliers. The bidder must disclose any employment by an organ of state, relationships with procuring institution employees, and interests in other CSD-registered enterprises.
Section
Source: Annexure 2 - SBD 4.pdfThe bidder must not have had any consultations, communications, agreements, or arrangements with any competitor regarding the quality, quantity, specifications, prices, or methods of calculating prices, market allocation, or the intention to submit or not submit a bid. Any such collusion will lead to disqualification and may be reported to the Competition Commission.
Contact Information
Source: Annexure 1 - Vendor application Local.pdf (unknown)Email submissions to [email protected]. No other contact details are provided in the document.
Submission Guidelines
Source: Annexure 1 - Vendor application Local.pdf (unknown)Email the completed vendor application form with all supporting documents to [email protected]. The form is for local and domestic stations. Required attachments include a cancelled cheque or bank confirmation letter (not older than one year), latest valid B-BBEE certificate or affidavit, latest valid tax clearance certificate or SARS PIN on official SARS documentation, CSD registration report, certified company registration documents, certified copies of shareholders' identity documents, certified shareholders' certificates, and a copy of the contract if a contracted supplier. Incomplete submissions or missing documents may delay or prevent vendor registration.
Returnable Documents
Source: Annexure 1 - Vendor application Local.pdf (unknown)Vendor application form for local and domestic stations. Completed document with all supporting documents to be emailed to [email protected]. Required documentation includes cancelled cheque or bank confirmation letter, latest valid B-BBEE certificate/affidavit, latest valid tax clearance certificate/SARS pin, CSD registration report, certified company registration documents, certified ID copies of shareholders, certified shareholders' certificates, and contract if contracted supplier.
Evaluation Criteria
Source: Annexure 1 - Vendor application Local.pdf (unknown)Bidders must be registered on the Central Supplier Database (CSD). A valid Tax Clearance Certificate or SARS PIN is required. A valid B-BBEE certificate or affidavit must be submitted. Certified company registration documents and certified copies of shareholders' identity documents are mandatory. A cancelled cheque or stamped bank confirmation letter not older than one year is required.
Technical Specifications
Source: Annexure 1 - Vendor application Local.pdf (unknown)The vendor application form requires B-BBEE status level, enterprise development (yes/no), value adding (yes/no), percentage black ownership, black women ownership, black people with disabilities, years in operation, and annual turnover. No technical specifications for the Qualys platform are included in this document.
Financial Requirements
Source: Annexure 1 - Vendor application Local.pdf (unknown)Payment terms are 15 days from invoice, with GSM approval schedule for negotiated contracted B-BBEE (QSE/EME). No other financial requirements are stated.
Compliance Requirements
Source: Annexure 1 - Vendor application Local.pdf (unknown)CSD registration report required. B-BBEE certificate or affidavit required, with details including certificate number, verification and expiry dates, applicable scorecard (EME, QSE, General/Large), status level, enterprise development, value adding, percentage black ownership, black women ownership, black people with disabilities, years in operation, and annual turnover. Tax clearance certificate or SARS PIN on official SARS documentation required. Certified company registration documents, certified copies of shareholders' identity documents, and certified shareholders' certificates required. Cancelled cheque or stamped bank confirmation letter not older than one year required.
Sets the constitutional standard for fair, equitable, transparent, competitive and cost-effective public procurement.
Relevant because this is a South African public-sector procurement opportunity.
Act 5 of 2000
Covers preferential procurement and preference-point systems used in public tenders.
Relevant because this is a South African public-sector procurement opportunity.
Act 12 of 2004
Supports anti-corruption controls and supplier integrity in procurement processes.
Relevant because this is a South African public-sector procurement opportunity.
Act 28 of 2024
Provides the national framework for public procurement across government.
Relevant because this is a South African public-sector procurement opportunity.
Act 2 of 2000
Supports access to tender records, award decisions and public-sector procurement information.
Relevant because this is a South African public-sector procurement opportunity.
Act 3 of 2000
Supports lawful, reasonable and procedurally fair administrative tender decisions.
Relevant because this is a South African public-sector procurement opportunity.
Source confidence
High source confidence
Official source
eTenders.gov.za
Documents found
4
Last checked
25 Aug 2026
AI status
Enhanced
Data conflicts
None detected
This tender has strong source evidence, including source metadata and supporting tender information synced from the government tender portal.
Tenders SA is not the issuing authority. All tenders are automatically synced from the official government tender portal. Always confirm final submission details, closing dates, briefing sessions, eligibility requirements, and documents on the official government portal before applying.
Learn how to submit a winning bid with these related articles
Win consulting, legal, accounting, and engineering service contracts with government. Learn registration requirements and proposal strategies.
Win government insurance, banking, actuarial, and financial consulting contracts. FSCA licensing requirements and tender strategies for financial service providers.
Master the art of the consulting bid. How to structure your methodology, price your services competitively, and score maximum evaluation points.
A professional guide for law firms to join the provincial and municipal legal panels in Gauteng, covering compliance, specialization, and bidding.
💡 Want more tendering tips and strategies?
Explore Our BlogGet deep intelligence on Information service activities. Unlock full pricing strategies, bid frequency, and historical win rates.