Custom Bid for Services - selection of CERT-in empanelled auditor for Comprehensive Vulnerability A
Canara Bank
BANGALORE, KARNATAKA
Progress
RAQuantity
1
Bid Type
Two Packet Bid
Canara Bank seeks a CERT-IN empaneled auditor to conduct comprehensive security testing and configuration reviews, including VAPT, secure configuration audit, and secure configuration document review, with API assessment as part of the scope. The engagement is targeted for half-year readiness through March 2026 and involves Bangalore, Karnataka operations. The bidding includes an EMD of ₹6,00,000 and term flexibility of up to 25% in contract quantity or duration. The vendor must comply with bank procurement policies and integrity commitments, with online/ DD payment options for EMD and timely submission of documents. Unique emphasis on credentials and regulatory alignment differentiates bidders with proven CERT-IN accreditation and security testing capabilities. This opportunity sits within Canara Bank’s Department of Financial Services procurement framework and requires rigorous documentation and adherence to the bank’s established ATC terms.
VAPT and secure configuration audit scope
CERT-IN empanelled auditor requirement
API security assessment as part of scope
Layout: Bangalore, Karnataka procurement locality
EMD ₹6,00,000; online or DD payment modes
Variation up to 25% in contract quantity/duration
Integrity Pact and all bid documents mandatory
EMD payment options via RTGS/online or DD with proof; no schedule yet for final payment terms.
No explicit delivery timeline published; bidders must comply with Canara Bank ATC terms and procurement schedule.
Penalties not specified in terms; follow standard bank contract LD provisions per ATC.
CERT-IN empanelment for audit services
No prior liquidation or bankruptcy
Financially sound with supporting statements
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
Yes
Item Category
Custom Bid for Services - SELECTION OF CERT-IN EMPANELED AUDITOR FOR CONDUCTING COMPREHENSIVE VULNERABILITY ASSESSMENT & PENETRATION TESTING (VAPT) FOR HALF-YEAR MARCH 2026, SECURE CONFIGURATION AUDIT & SECURE CONFIGURATION DOCUMENT REVIEW AND API AS..
Trusted by 5,000+ companies to find, track, and win government tenders.
Our team will walk you through the platform and help set up your profile — free, no commitment.
Our team will reach out to schedule your free session.
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Main Document
SCOPE_OF_WORK
PAYMENT
OTHER
OTHER
OTHER
ATC
GEM_GENERAL_TERMS_AND_CONDITIONS
Canara Bank
BANGALORE, KARNATAKA
Canara Bank
BANGALORE, KARNATAKA
N/a
MUMBAI, MAHARASHTRA
Hindustan Aeronautics Limited (hal)
BANGALORE, KARNATAKA
N/a
GURGAON, HARYANA
Tender Results
Loading results...
GST Registration Certificate
Permanent Account Number (PAN) Card
Experience Certificates for similar VAPT/security audits
Audited Financial Statements for the past 3 years
EMD submission proof (online transfer slip or DD copy)
Technical bid documents demonstrating CERT-IN empanelment
Integrity Pact signed and uploaded
OEM authorizations or proof of security testing credentials (if applicable)
Extended Deadline
22-Jan-2026, 3:00 pm
Opening Date
22-Jan-2026, 3:30 pm
Extended Deadline
19-Jan-2026, 3:00 pm
Opening Date
19-Jan-2026, 3:30 pm
Start
24-Feb-2026, 5:00 pm
End
26-Feb-2026, 10:00 am
Duration: 41 hours
Reverse Auction Document
✅ RA concluded. Check financial results for final rankings.
| S.No | Seller | Date | Status |
|---|---|---|---|
| 1 | A3S Tech & Company Under PMA | 13-01-2026 11:37:40 | |
| 2 | ALLIED BOSTON CONSULTANTS INDIA PRIVATE LIMITED Under PMA | 19-01-2026 10:49:38 | |
| 3 | CONTROLCASE INTERNATIONAL PRIVATE LIMITED Under PMA | 19-01-2026 14:26:47 | |
| 4 | CYBERSRC CONSULTANCY PRIVATE LIMITED Under PMA | 08-01-2026 12:52:44 | |
| 5 | DIGITAL AGE STRATEGIES PRIVATE LIMITED Under PMA | 13-01-2026 13:53:40 | |
| 6 | G-INFO TECHNOLOGY SOLUTIONS PRIVATE LIMITED Under PMA | 13-01-2026 11:44:46 | |
| 7 | KPMG ASSURANCE AND CONSULTING SERVICES LLP Under PMA | 19-01-2026 14:28:10 | |
| 8 | PROTIVITI INDIA MEMBER PRIVATE LIMITED Under PMA | 19-01-2026 14:40:07 | |
| 9 | SECUREYES TECHNO SERVICES PRIVATE LIMITED Under PMA | 13-01-2026 13:28:38 | |
| 10 | TAC INFOSEC LIMITED Under PMA | 19-01-2026 14:51:33 | |
| 11 | TECHD CYBERSECURITY LIMITED Under PMA | 12-01-2026 20:21:24 |
These are the final prices after the reverse auction event. Prices may be lower than initial bids.
| Rank | Seller | Final Price | Item |
|---|---|---|---|
| L1 | A3S Tech & Company Under PMA Winner | ₹1,22,00,000 | Item Categories : Custom Bid for Services - SELECTION OF CERT-IN EMPANELED AUDITOR FOR CONDUCTING COMPREHENSIVE VULNE |
| L2 | SECUREYES TECHNO SERVICES PRIVATE LIMITED Under PMA | ₹1,24,00,000 | Item Categories : Custom Bid for Services - SELECTION OF CERT-IN EMPANELED AUDITOR FOR CONDUCTING COMPREHENSIVE VULNE |
| L3 | KPMG ASSURANCE AND CONSULTING SERVICES LLP Under PMA | ₹1,30,00,000 | Item Categories : Custom Bid for Services - SELECTION OF CERT-IN EMPANELED AUDITOR FOR CONDUCTING COMPREHENSIVE VULNE |
| L4 | PROTIVITI INDIA MEMBER PRIVATE LIMITED Under PMA | ₹3,56,83,496 | Item Categories : Custom Bid for Services - SELECTION OF CERT-IN EMPANELED AUDITOR FOR CONDUCTING COMPREHENSIVE VULNE |
🎉 L1 Winner
A3S Tech & Company Under PMA
Final Price: ₹1,22,00,000
Please sign in or create an account to view contract details and download result documents.
Key insights about KARNATAKA tender market
Bidders must be CERT-IN empaneled auditors and submit EMD ₹6,00,000 via RTGS/DD, proof of online transfer, GST, PAN, financials, experience certificates, integrity pact, and technical bid per ATC. Ensure 25% variation clause acceptance and upload all required documents.
Submit GST certificate, PAN card, last 3 years financial statements, experience certificates for VAPT/security audits, EMD proof (online/DD), technical bid demonstrating CERT-IN credentials, integrity pact, and OEM authorizations if applicable.
Bidders must hold CERT-IN empanelment and demonstrate IS-550/ISO 27001-aligned processes where applicable; provide security testing methodology, reporting formats, and evidence of prior VAPT engagements for similar bank clients.
EMD is ₹6,00,000; pay via online RTGS or internet banking to account Canara Bank, or submit a Demand Draft payable at Bangalore, with scanned proof uploaded to the bid. Include bid number and bidder name in transfer details.
Exact bid end date not disclosed in available data; bidders should monitor the canara bank procurement ATC and ensure submission of all mandatory documents, including integrity pact, prior to the stated bid end date.
Specific delivery timelines and LDs are not stated; bidders must align with Canara Bank ATC terms, and any penalties would follow standard bank contract provisions, with potential LDs for delays in audit reporting or incomplete scope.
Provide documented API security testing experience, including methodology (OWASP-based), testing tools, results, and references; include scope covering API discovery, authentication, authorization, rate-limiting, and secure configurations in audit reports.
Scope includes evaluating secure baseline configurations, patch management, access controls, and hardening guides; provide evidence of prior engagements delivering secure configuration reviews for financial institutions and clear remediation recommendations.
Indian Navy
📍 CENTRAL DELHI, DELHI
Odisha Gramya Bank
📍 KHORDHA, ODISHA
Bharat Petroleum Corporation Ltd
📍 MUMBAI, MAHARASHTRA
Bharat Electronics Limited (bel)
📍 BANGALORE, KARNATAKA
Office Of Dg (mss)
📍 PANCHKULA, HARYANA
Sign up now to access all documents
Main Document
SCOPE_OF_WORK
PAYMENT
OTHER
OTHER
OTHER
ATC
GEM_GENERAL_TERMS_AND_CONDITIONS