BHEL Vulnerability & Penetration Testing Tender Bengaluru/India 2026 - Security Testing Services ISO/IEC 27001
Bharat Heavy Electricals Limited (bhel)
BANGALORE, KARNATAKA
Bid Publish Date
02-Jun-2026, 10:10 pm
Bid End Date
13-Jun-2026, 9:00 am
EMD
₹3,26,000
Value
₹1,08,64,260
Location
Progress
Quantity
1
Bid Type
Two Packet Bid
The Indian Navy invites proposals for outsourcing Vulnerability Assessment and Penetration Testing (VA/PT) of internet-based websites for a period of three years. The project has an estimated value of ₹10,864,260 with an EMD of ₹326,000. The engagement requires the service provider to have an office in the consignee state and deliver VA/PT services for the Navy’s internet assets from a centralized location in Central Delhi, Delhi 110002. A distinct evaluation criterion emphasizes demonstrable past VA/PT experience and the ability to provide dedicated support channels, including a toll-free number and an escalation matrix. The procurement emphasizes security and risk mitigation through formal certificates like the Malicious Code Certificate and adherence to mandatory documentation.
VA/PT scope limited to internet-based websites
Contract duration: three years
Estimated value: ₹10,864,260; EMD: ₹326,000
Office presence proof in consignee state; Delhi region emphasized
Dedicated toll-free service line and escalation matrix
Malicious Code Certificate and IP rights protection
EMD: ₹326,000; PAN, GST, ECS, bank solvency certificates required
Office presence in consignee state with documentary evidence
Dedicated support line and escalation matrix required
Not specified in data; bidders should anticipate standard government terms with invoicing upon milestones and acceptance
Not specified; procurement emphasizes a three-year VA/PT engagement with ongoing support
Not specified; bidders should verify LDs in the final terms with the Navy
Must have VA/PT experience on internet-facing assets
Office in consignee state with verifiable address
Financial soundness evidenced by bank solvency certificate
Tender Category
Service
Bid To RA
No
Bid To RA Enabled
Yes
Item Category
Custom Bid for Services - OUTSOURCING OF SERVICES TO UNDERTAKE VULNERABILITY ASSESSMENT/PENETRATION TESTING (VA/PT) OF INTERNET BASED WEBSITES FOR A PERIOD OF THREE YEARS
Trusted by 5,000+ companies to find, track, and win government tenders.
Our team will walk you through the platform and help set up your profile — free, no commitment.
Our team will reach out to schedule your free session.
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Main Document
OTHER
OTHER
OTHER
SCOPE_OF_WORK
PAYMENT
BOQ
OTHER
OTHER
OTHER
OTHER
GEM_GENERAL_TERMS_AND_CONDITIONS
Bharat Heavy Electricals Limited (bhel)
BANGALORE, KARNATAKA
N/a
BHARUCH, GUJARAT
Goa Shipyard Limited
SOUTH GOA, GOA
Oil And Natural Gas Corporation Limited
EAST GODAVARI, ANDHRA PRADESH
Nhpc Limited
JALPAIGURI, WEST BENGAL
Tender Results
Loading results...
Discover companies most likely to bid on this tender
PAN and GST certificates
ECS mandate and cancelled cheque
Latest bank solvency certificate
Authorized signatory authentication for all submissions
Past experience proofs: contract copies with invoices or execution certificates
Malicious Code Certificate declaring no embedded malicious code
Documentation proving office presence in consignee state
Key insights about DELHI tender market
Submit bids with PAN, GST, ECS mandate, cancelled cheque, and bank solvency certificate. Provide evidence of VA/PT experience via contracts or client certificates. Include a Malicious Code Certificate and demonstrate dedicated toll-free service access. Ensure office proof in the consignee state and sign all documents through an authorized signatory.
Required docs include PAN, GST, ECS mandate, cancelled cheque, latest bank solvency certificate, authorized signatory proof, and past experience proofs such as contracts with invoices or client execution certificates. Also include Malicious Code Certificate and office location evidence in the consignee state.
Technical scope covers vulnerability assessment and penetration testing of internet-based websites for three years. Estimated contract value is ₹10,864,260 with EMD ₹326,000. Service must include continuous support, dedicated toll-free line, and an escalation matrix for prompt issue resolution.
Bidders must provide a Malicious Code Certificate ensuring no embedded malware and IP rights compliance. Compliance with IS or security standards relevant to VA/PT is expected, alongside standard government procurement documentation and contractual sign-offs.
The bid security deposit is ₹326,000. While exact payment mechanics aren’t detailed, bidders should plan for an upfront EMD submission via acceptable mode and anticipate milestone-based invoicing aligned with Navy acceptance for VA/PT services.
The office must be located in the consignee state, i.e., within the Delhi region, with documentary evidence submitted as part of the bid package to prove address and operational base.
Submit one or more of: contract copy with invoices and bidder self-certification of service execution; client execution certificate with contract value; or related documents like third-party inspection notes. This proves capability for VA/PT on web assets.
Penalties/LD details are not explicitly stated; bidders should seek clarifications, but expect remedies for service disruption, response delays, and security non-compliance. Emphasize adherence to Malicious Code Certificate and timely support as core commitments.
South Central Railway
📍 GUNTUR, ANDHRA PRADESH
Indian Navy
📍 UTTARA KANNADA, KARNATAKA
Salem Steel Plant
📍 SALEM, TAMIL NADU
Bharat Petroleum Corporation Ltd
📍 JAMNAGAR, GUJARAT
Armoured Vehicles Nigam Limited
Sign up now to access all documents
Main Document
OTHER
OTHER
OTHER
SCOPE_OF_WORK
PAYMENT
BOQ
OTHER
OTHER
OTHER
OTHER
GEM_GENERAL_TERMS_AND_CONDITIONS