Cybersecurity Services Company Tenders in Gauteng

INSETA seeks an Odoo Accredited Partner to fully upgrade its Mission-Critical Management Information System from Odoo Version 14 to the latest community version within a five-month timeframe. The tender requires a comprehensive end-to-end migration including code refactoring, data migration, integration validation, and post-go-live support. Bidders must demonstrate active Odoo partner status, strong local content through reference letters and senior developer expertise, and full compliance with B-BBEE and national treasury requirements.

The Mining Qualifications Authority (MQA) requires a service provider to deliver managed services for its backup, disaster recovery, and disaster recovery site solution for a period of 38 months, ending 31 March 2030. The contract covers the ongoing management and support of backup and disaster recovery infrastructure, including the disaster recovery site. Bidders must submit a compliant bid by 19 October 2026 at 11:00, and any bidder on the Register for Tender Defaulters or the List of Restricted Suppliers will be automatically disqualified.

Postbank SOC requires a Board Portal Software Solution for a 36-month period to support board management, governance compliance, and workflow automation. The solution must include digital board packs, integration with Microsoft 365, e-signatures, voting, secure messaging, and advanced security and compliance features. Bidders must pass a three-phase evaluation: technical/functional (minimum 70/100), a system demonstration (must score 100), and then price (80) and specific goals (20). The most consequential consideration is the strict Phase 2 requirement to cover all demonstration aspects to proceed to price evaluation.

ATNS is procuring a cloud-based cybersecurity awareness solution, including supply, implementation, support, maintenance, and managed services, for a five-year period. The solution must provide online training for all user levels, phishing simulations, and reporting, and must comply with ISO/IEC 27001 and NIST standards. The most consequential requirement is the compulsory online briefing session on 07 September 2026, attendance of which is mandatory for bid eligibility.

The City of Tshwane requires a service provider to render ICT desktop support services for a three-year period. Bidders must submit online via the SAP Ariba Business Network and also deposit a supplementary hard copy at Tshwane House before the closing time. The contract is subject to the 90/10 preferential point system, and attendance at the compulsory briefing session is mandatory.

NMISA requires a qualified cybersecurity service provider to conduct a once-off independent penetration testing and vulnerability assessment of its external and internal attack surface, Microsoft Azure and Microsoft 365 cloud environment, identity services (Entra ID), networks, wireless infrastructure, web applications and other critical ICT systems. The engagement covers an initial assessment, reporting and remediation workshop within approximately three months, followed by two included remediation retest cycles over up to three additional months. Bidders must submit a fixed, comprehensive price for the core services, with optional rates quoted separately. The most consequential consideration is the mandatory functional evaluation threshold of 80 out of 100 points, which requires demonstrated experience, a detailed methodology, qualified key personnel and relevant certifications.

The NHBRC is appointing a panel of service providers to deliver managed ICT support services for two years, covering SAP support, digital services (.NET and cloud platforms), ICT infrastructure and desktop support, ICT security and governance, and professional services. Bidders select which of the five categories — and which roles within a category — they are bidding for, and each category is evaluated independently. Evaluation is on functionality alone, with price excluded, and a bidder must score at least 70 of 100 points in a category to be admitted to the panel for it. Panel appointment carries no guaranteed work: assignments are released rotationally as work packages over the two-year term.

The Mine Health and Safety Council requires a service provider to supply, install, configure and commission a Visitor Management System at its Rivonia premises, comprising two self-service kiosks with touchscreens, badge printers, scanners and cameras, a full software suite, integration with the existing fingerprint and facial-recognition access control system and Active Directory, plus three years of maintenance and support. The solution must cover pre-registration, check-in and check-out, badge printing, photo capture, visitor tracking and POPIA-compliant reporting, with all visitor data resident in South Africa. Bids close at 11:00 on 27 October 2026 and must be emailed to [email protected], and bidders must first clear a 70 out of 100 functionality threshold before price and preference points are scored on an 80/20 basis. The single most consequential hurdle is the mandatory OEM accreditation certificate or reseller letter for the proposed system, which must still be valid on the closing date.

The National School of Government (NSG) requires the supply and delivery of new, OEM-quality laptops, desktops and accessories, including 20 senior-manager laptops, 70 staff laptops, 25 all-in-one desktops, 150 laptop bags, 15 monitors, 15 HDMI cables and 20 wired mice, all with a 3-year OEM-backed onsite next business day warranty. The contract will run for three years, with delivery to the NSG Asset Management Unit in Pretoria within at least 12 weeks of a written order. Only bidders accredited on the SITA RFB740 contract for Gauteng Province may respond, and bids are evaluated under the 80/20 preference point system.

The Trans-Caledon Tunnel Authority requires a single service provider to supply and deliver brand-new OEM desktops, laptops, dual screens, monitors, docking stations, keyboards, mice, laptop bags and travel chargers over a three-year contract, including factory imaging, a cloud-based device management portal, three-year OEM warranty, and on-site or remote technical support with a 48-hour repair turnaround. The procurement uses an 80/20 preference point system with functionality evaluated at 70 points and price at 80 points. The most consequential bidder consideration is the mandatory OEM or distributor partnership certificate for all proposed brands — failure to submit this, or failure to mark every specification line as "YES" in Annexure A, results in immediate disqualification.

The department is requesting a demonstration of Energy Trading and Risk Management (ETRM) software for Eskom. Suppliers must register on the eTendering portal, verify via OTP, and upload the required documents by the closing date of 6 November 2026 at 11:00. The most critical bidder consideration is obtaining a CSD number to gain system access.

This tender invites bids for the supply, configuration, installation, maintenance and support of Aruba switches and wireless infrastructure (Wi-Fi) for the Department of Water and Sanitation (DWS), with SITA as the contracting authority. The contract includes removal of old switches to a provided storeroom, three years of maintenance and support, and after-hours helpdesk support for the first three months per site. The 80/20 preference point system applies, with 80 points for price and 20 for specific goals. Bidders must complete mandatory technical requirements, submit preference claims with evidence, and provide references for similar Aruba projects delivered in the last five years. The closing date is 5 October 2026 at 11:00 South African Time.

The Gauteng Provincial Legislature (GPL) invites bids for the appointment of an Internet Service Provider (ISP) for a five-year contract. The successful bidder will provide internet services, including access points at specified locations (e.g., Ground Floor, Auditorium, Chamber, New Members Lounge, Public Forum) and must maintain link uptime as per the SLA. The contract is subject to the 80/20 preference point system, with 20 points for specific goals. Bidders must submit a sealed bid marked with Bid No. GPL005/2027, with financial proposals in a separate envelope. The bidder must initial all pages, register on the Central Supplier Database (CSD), and comply with security clearance requirements for personnel. Subcontracting is limited to 25% of total contract deliverables. The GPL may require presentations from short-listed bidders and reserves the right to cancel the bid. Bids must be submitted on official forms, not re-typed.

The Gauteng Provincial Government invites open bids for SAP infrastructure under Bid 2646GS. This tender is open to qualified ICT service providers and suppliers capable of delivering SAP infrastructure solutions. No compulsory briefing session is required for this tender.

Transnet SOC Ltd requires the provision of a hosted PBX service nationally for a five-year period. The tender is a Request for Proposal, and bidders must sign and return the Non-Disclosure Agreement (NDA) as part of their bid response. The most consequential consideration is that the NDA imposes strict confidentiality obligations that survive for five years after the termination of bid discussions, and bidders must be prepared to comply with these terms to participate.

ATNS seeks a qualified service provider to design, implement, operate, support, and maintain a fully integrated on-premises Security Operations Centre (SOC) for five years, covering continuous cybersecurity monitoring, threat detection, incident response, and protection of critical IT and OT (CNS/ATM) environments. The contract will be awarded under an 80/20 preference point system, with a minimum functionality threshold of 70 out of 100 points. Bidders must attend a compulsory briefing session and submit three parcels (administrative/mandatory, functionality, price/preference) by 02 October 2026, 14h00 CAT.

Comprehensive Information Security and Cybersecurity services are required by Postbank SOC for a period of three years, covering a 24/7 Security Operations Centre, endpoint protection, zero-trust network security, identity and access management, privileged access management, data protection, incident response, threat intelligence, and governance. The most consequential requirement is the mandatory minimum of 70 out of 100 points on functionality evaluation, with strict SLAs including a 15-minute mean time to detect and 30-minute mean time to respond, and the provider must hold professional indemnity insurance of at least R20 million and be certified or partnered with at least three of ISO 27001, PCI DSS QSA, CISSP, CEH, or OSCP.

Legal Aid South Africa requires a service provider to supply and manage a next-generation wide area network, secure internet connectivity, managed security, disaster recovery and related managed services for a five-year contract. The successful bidder will be responsible for a reliable, efficient and effective service across Legal Aid SA's national footprint, with the tender potentially split between multiple providers. Bidders must submit firm, Rand-denominated prices valid for 180 days, and the proposal will be evaluated on an 80/20 basis (price and B-BBEE specific goals), with compliance with all returnable forms and the 19 October 2026 deadline being critical.

The Technology Innovation Agency is requesting quotes for telkom number porting to SIP trunks, requiring suppliers to migrate telecommunications numbers to new SIP trunking infrastructure. Bidders must demonstrate eligibility for preference points under the 90/10 system with specific goals including 50% historically disadvantaged individual ownership, 51% black women ownership, at least one disabled owner, and youth ownership. Critical requirements include completing the SBD 6.1 preference points form with documentary proof, meeting B-BBEE and CIDB compliance standards, and submitting all mandatory forms before the closing date.