Hindustan Aeronautics Limited VAPT Audit Tender for HAL Engine and AERDC Divisions Rajasthan/India 2026

Tender Overview

Hindustan Aeronautics Limited invites a turnkey VAPT audit for HAL Engine and AERDC divisions. Scope includes audit for Inventory Router Switch 1 unit, Servers 6 units, Desktops 36 units with price validity for 3 years. Location details are not specified; the procurement focuses on security assessment services to safeguard critical aerospace assets. A flexible contract framework allows scope/duration adjustments up to 50% at contract issuance and within the award period, enabling adaptation to evolving defence needs. The tender emphasizes vendor commitment, documentation integrity, and adherence to uploaded ATC clauses. The opportunity targets service providers capable of delivering comprehensive security testing and remediation planning for enterprise IT infrastructure in a defence production setting.

Technical Specifications & Requirements

• Service category: Annual VAPT audit on a turnkey basis for HAL Engine and AERDC divisions
• Assets to audit: Inventory Router Switch 1 + Servers 6 + Desktops 36
• Contract duration: price validity for 3 years; quantity/duration may be increased up to 50% with consent
• MSME preference: potential eligibility for MSE benefit if the bidder is the manufacturer or service provider; L-1 matching within policy margins possible
• Documentation requirement: ensure upload of all certificates and documents as per Bid Document, ATC, and Corrigendum
• Contact for clarifications: [email protected]

Terms, Conditions & Eligibility

• EMD/guarantee: not specified in data; bidders must refer to Bid Document for exact deposit terms
• Delivery timeline: not explicitly stated; must be clarified during bid discussions
• Payment terms: not specified; bidders should verify with HAL procurement terms in ATC
• Sub-contracting: not allowed without prior written consent; ultimate liability remains with the primary vendor
• MSE eligibility: Purchase preference per MSE policy; service-provider eligibility applies; evidence must be uploaded
• Certification risk: failure to upload required certificates may lead to rejection; compliance with ATC is critical