Tender Overview
- Delhi Jal Board seeks security testing services for web applications, mobile applications, and GAP ANALYSIS; Application Security Audit (OWASP Top 10) with an estimated contract value of ₹5,00,000. Scope is defined by vulnerability assessment and security gap analysis, with no BOQ items published. The buyer requires the service provider to have a local office in the consignee state (Delhi) and to adhere to the supplier documentation outlined in the ATC. A quantity/duration adjustment up to 25% is permissible at contract issue and post-issuance, binding bidders to accept revised scope. This tender emphasizes real-time risk reduction for government digital services.
Technical Specifications & Requirements
- Product/service category: Vulnerability testing, web & mobile application security assessment, and OWASP Top 10 audit.
- Standards & certifications: At minimum, reference to OWASP Top 10 framework; no other standards listed in the data. Ensure audit deliverables cover injection, auth, broken access controls, sensitive data exposure, and misconfigurations per OWASP guidance.
- Delivery/installation: No explicit delivery window provided; bidders must align with Delhi Jal Board expectations and ATC within contract period. Service provider must have a local Delhi office and provide an escalation matrix for service support.
- Experience/qualification: Documentation must show ability to perform application security testing on government-like environments; ensure capability to deliver end-to-end vulnerability reports and remediation recommendations.
- Support & warranties: Post-assessment support and remediation guidance should be included as part of the deliverables (per standard security audit practice).
Terms, Conditions & Eligibility
- EMD/guarantee: Not specified in the available data.
- Contract flexibility: Quantity or duration may be increased up to 25% at the time of contract issuance and thereafter.
- Local presence: Office of the service provider must be located in the state of the consignee (Delhi) with documentary evidence.
- Escalation: Provide an Escalation Matrix with telephone numbers for service support.
- Documentation: Upload all certificates and documents sought in the Bid document, ATC, and corrigenda; otherwise risk rejection.
- Delivery terms: No explicit payment terms or milestones listed in the data; bidders should anticipate standard government payment practices after deliverables review.
