Progress
The Department Of Science And Technology (DST) Secretariat in NEW DELHI, DELHI invites bids for a Cyber Security Audit and related Security & Compliance Audit services. Estimated value is ₹20,000. The vendor must be CERT-In empaneled and provide on-site audit expertise for government ministries/departments. The assignment requires two years of relevant experience and submission of multiple work orders in the last three fiscal years. A qualification check will verify empanelment validity through bid submission and during completion. Bidders should prepare to demonstrate formal security assessment capabilities and report issuance.
CERT-In empanelled Information Security Auditing Organization required
Minimum 2 years experience in Security Audit/VAPT for government websites/web applications
On-site security audit visit to the Department is mandatory
Evidence via two work orders/completion certificates across different financial years
Full work order documents to be uploaded; incomplete orders rejected
CERT-In empanelment must be valid at bid submission and for at least two months after
On-site audit requirement at the Department for the security evaluation
Two years of relevant experience with two government-sector projects in last three years
No explicit EMD or payment milestone described in the information provided
Audit to be conducted on-site with final security audit certificate/report issuance after completion
No specific LD/exclusion details provided in the tender data
Must hold CERT-In empanelment as an Information Security Auditor
Must have at least 2 years of Security Audit/VAPT experience by 31.03.2026
Must provide two government sector work orders from two different financial years showing scope
| Rank | Seller | Price | Item |
|---|---|---|---|
| L1 | LORCAM SOLUTIONS PRIVATE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L2 | DR cbs cyber security services llp( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L3 | SECURENEXGEN LLP( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L4 | SECNIC CONSULTANCY SERVICES PRIVATE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L5 | DIGITAL AGE STRATEGIES PRIVATE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L6 | ACCEDERE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L7 | MACKSOFY TECHNOLOGIES PRIVATE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit | |
| L8 | DIGIFORTEX TECHNOLOGIES PRIVATE LIMITED( MSE Social Category:General ) Under PMA | Item Categories : Cyber Security Audit - Security and Compliance Audit |
Please sign in or create an account to view contract details and download result documents.
Quantity
1
Bid Type
Single Packet Bid
Bid Validity
90 (Days)
Bid Type
Service
Evaluation
Total value wise evaluation
Tech Clarification Time
2 Days
EMD Required
No
MII Compliance
Yes
MSE Purchase Preference
Yes
MSE Preference Band
L1+15%
MSE Exemption/Relaxation
No
Startup Exemption/Relaxation
No
Bid Splitting Applied
No
Experience Required
2 Year (s)
Arbitration Clause
No
Mediation Clause
No
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
No
Item Category
Cyber Security Audit - Security and Compliance Audit
Delivery Locations
1
Delivery Cities
South
Delivery Pincodes
110016
| Consignee | Address | City | State | Pincode | Quantity | Delivery Days | Additional Requirement |
|---|---|---|---|---|---|---|---|
| Aman | 110016,TECHNOLOGY BHAWAN, NEW MEHRAULLI ROAD, NEW DELHI | South | Delhi | 110016 | Project / Lumpsum Based | - | - |
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Main Document
OTHER
GEM_GENERAL_TERMS_AND_CONDITIONS
GEM_GENERAL_TERMS_AND_CONDITIONS
GST registration certificate
Permanent Account Number (PAN) card
CERT-In empanelment proof (valid on bid submission and during contract)
Two work orders/completion certificates from government entities showing Security Audit/VAPT scope
Evidence of two-year minimum experience in Security Audit/VAPT (website/web application)
Audited financial statements or turnover evidence demonstrating financial capability
Technical bid documents and methodology for conducting on-site cyber security audit
OEM authorizations or certifications if required by DST terms
On-site visit plan and schedule for the audit
Key insights about DELHI tender market
Bidders must be CERT-In empanelled and valid at submission, provide on-site audit capability, and submit two government work orders in the last three fiscal years. Include full work orders, not extracts, along with proof of CERT-In empanelment and two years of VAPT experience. Deliverables include final audit certificate/report.
Submit GST, PAN, CERT-In empanelment proof, two government sector work orders with scope, financial statements, technical approach for on-site audit, and OEM authorizations if applicable. Ensure completeness and upload all documents before the bid deadline to avoid rejection.
Applicants must demonstrate two years of VAPT experience, provide two qualifying government projects in different financial years, and show on-site audit capability. Provide full orders showing scope, and the CERT-In empanelment must cover information security auditing.
The audit is an on-site activity with a final security audit certificate/report to be issued after completion. Ensure empanelment validity spans bid submission and completion; contractor should be prepared to schedule an on-site visit promptly after contract award.
EMD amount is not disclosed in the tender data. Bidder should monitor official communications for any bid security requirements or alternative assurance as per DST terms and annual procurement guidelines.
Required certifications include CERT-In empanelment as an Information Security Auditor. The tender emphasizes IS/VAPT practice for government websites; ensure methodology aligns with CERT-In guidelines and demonstrates field testing, reporting, and secure remediation recommendations.
Acceptable evidence includes full work orders/completion certificates from government clients showing the security audit/VAPT scope, two different financial years, and the complete order documents—not just extracts. Certificates must clearly indicate work performed and outcomes.