Network Penetration and Security Monitoring Services for SAA
Rubina Data
In plain English
South African Airways is procuring network penetration testing and active exploit monitoring services. Bidders must comply with internationally recognized cybersecurity standards and have a valid Tax Clearance Certificate.
Always check the official documentDescription
South African Airways (SAA) invites bids for network penetration services (GSM063/26). The project involves internal and external penetration testing, active exploit monitoring, and ongoing security management for at least 2,200 user endpoints. The service provider must proactively identify vulnerabilities, simulate real-world attacks, and provide monthly and quarterly risk reports. The work will be performed within the SAA environment. Bidders must demonstrate at least 6 years of experience in penetration testing within the financial or aviation sectors and 4 years in active watch solutions. The project requires a team of at least five security professionals holding OSCP and other relevant certifications. The tender closes on 14 September 2026 at 16:00pm, with a validity period of 180 days.
What you need to qualify
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Valid Tax Clearance Certificate or SARS pin
- Methodology aligned with ISO/IEC 27001, NIST, OSSTMM, OWASP, or PTES
- Documented evidence of three relevant managed service engagements
- Key personnel must hold OSCP or equivalent certifications
Contact & how to apply
Name: Rubina Data
Email: RubinaData@flysaa.com
Phone: 011-978-2155
How to apply: Submit your quotation via email to Tenders@flysaa.com. Ensure each email does not exceed 2MB; if files are larger, send them in multiple parts or provide a secure, accessible download link.
Related tenders
Supply and Maintenance of Security Platform for ACSA.
Airports Company South Africa (ACSA) seeks bids for the supply, installation, commissioning, support, and maintenance of an Intelligent Integrated Security Platform across all nine ACSA airports and the corporate office. The project involves implementing a centralized security system integrating CCTV, access control, and perimeter detection. The contract is for 60 months, including a 9-month implementation period and 24/7/365 support. The system must meet cybersecurity and aviation safety standards, and bidders should have at least five years of experience in similar projects.
Provision of Energy Performance Certificate Services for SAA Group
This tender involves providing Energy Performance Certificate (EPC) services for a national portfolio, assessing buildings for energy efficiency per SANS 1544 standards. Tasks include site inspections, verifying energy consumption data, calculating energy intensity, and registering certificates with SANEDI. The provider must deliver compliance reports, recommend energy improvements, and present summaries to the SAA Group, requiring national coordination and stakeholder workshops.
Cybersecurity Awareness Solution for ATNS.
Air Traffic and Navigation Services (ATNS) seeks a service provider to supply, implement, and support a cloud-based cybersecurity awareness training platform for five years. The solution should include online training, phishing simulations, email reminders, and Active Directory integration. The provider must offer progress tracking and analytics. The project will be executed at ATNS facilities, with a contract duration of five years. A compulsory briefing session is on 07 September 2026, and the closing date is 09 October 2026.
Provision of Aviation Cybersecurity Mastery Program.
Airports Company South Africa (ACSA) seeks a service provider to deliver a 5-day Aviation Cybersecurity Mastery Program. The training will be customized for 10 to 15 participants per group, reaching over 200 participants in 24 months. Focus areas include cyber governance, operational resilience, and incident response in aviation. Deliverables include lesson plans, facilitator credentials, learner materials, attendance records, and training reports. The program will be conducted in English, with certificates awarded upon completion. The project starts on 01 October 2026.
Service Provider for Security Operations Centre (SOC)
Air Traffic and Navigation Services (ATNS) requires a service provider to implement, operate, and maintain a Security Operations Centre (SOC) for five years. The project includes designing and installing hardware and software to monitor IT systems, network infrastructure, and air traffic management systems. The provider must ensure continuous security monitoring, incident response, and threat hunting. The SOC will be based at ATNS facilities in South Africa, with key deliverables including an integrated on-premises SOC, ongoing maintenance, and security training for staff.
Service provider for conflict-of-interest screening at ACSA.
Airports Company South Africa (ACSA) seeks a service provider for conflict-of-interest screening and reputational due diligence for up to 24 months. Tasks include checking supplier and director registers, criminal record verification, PEP screening, and adverse media monitoring. The provider must deliver risk-rated reports and ensure secure data handling. Services are on an as-needed basis with fixed rates per individual screened.