Development of Capture the Flag Challenges for SANReN.
CSIR
In plain English
The CSIR is procuring Capture the Flag (CTF) challenges for the SANReN Cyber Security Challenge 2026/27. Bidders must be registered on the National Treasury Central Supplier Database.
Always check the official documentDescription
The Council for Scientific and Industrial Research (CSIR) invites bids for the development and supply of 64 Capture the Flag (CTF) challenges for the SANReN Cyber Security Challenge. The project involves creating custom ethical hacking challenges for both the 2026 Final and 2027 Qualification rounds. Deliverables include challenges compatible with the CTFd platform, complete with solutions, Docker images, and technical support. The work requires remote support for the qualification round and in-person support for the final event. All challenges must be original and not sourced from the internet. The final event is scheduled for November 2026, with the qualification event occurring throughout 2027.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
Full requirements
- Registered on the National Treasury Central Supplier Database (CSD)
- Valid Tax Compliance status (SARS PIN or CSD report)
- Proven experience in CTF challenge development
- Documented history of no fraudulent or illegal conduct by directors
Contact & how to apply
Name: SCM
Email: tender@csir.co.za
Phone: 012-841-2911
How to apply: Submit proposals electronically to tender@csir.co.za. The submission must be split into two separate emails: one for the Technical Proposal and one for the Pricing Proposal. Ensure the subject line includes the RFP number and description. If files exceed 25MB, send multiple emails.
Related tenders
Supply of Robotic Platforms for CSIR R&D.
The CSIR requests quotations for supplying four types of robotic platforms: heavy EOD/CBRN robots, medium EOD/SWAT robots, autonomous research platforms, and small reconnaissance robots. The project includes on-site commissioning, installation, and operator training in South Africa. Deliverables include technical data sheets, user manuals, and maintenance support. Bidders must include freight, insurance, and duties in pricing and have a local service center in Gauteng for support and parts availability within 21 days. The tender closes on 09 September 2026.
Provision of ICT Equipment Maintenance for SANRAL.
The South African National Roads Agency (SANRAL) seeks tenders for break-fix services and maintenance of its ICT infrastructure at various locations in Gauteng over an 18-month period. Services include system health checks, firmware updates, and 24/7 support for critical issues, focusing on legacy infrastructure such as HPE servers and Veeam software. Bidders must provide certified technical experts and subcontract 30% of the work to Targeted Enterprises to ensure stable ICT operations until the National Data Centre rollout is complete.
Panel for Integrated Management Systems Development.
The CSIR seeks service providers to develop and implement Integrated Management Systems (ISO 9001, ISO 14001, ISO 45001) for beneficiary companies across South Africa over four years. Tasks include gap audits, staff training, SOP development, and internal audits. This EOI aims to establish a panel, with specific tasks assigned later. Submissions close on 25 August 2026.
Provision of ICT Equipment Maintenance for SANRAL.
The South African National Roads Agency (SANRAL) seeks tenders for break-fix services and maintenance of ICT equipment over 18 months. The project involves hardware repair, software support, system health checks, and 24/7 technical support at the Head Office, Central Operations Centre, and Rivonia Data Centres. Responsibilities include managing compute, storage, backup, and network components, with firmware updates and security advisory services. A transition phase for knowledge transfer and equipment decommissioning is included. Services must meet SLA response times. Located in Gauteng Province, submissions are due by 04 September 2026.
Employee Benefits Consulting Services for SANSA.
The South African National Space Agency (SANSA) seeks a service provider for employee benefits consulting services for approximately 200 permanent employees across various locations. The services include managing medical aid schemes, retirement and pension funds, group risk benefits, and corporate funeral cover. Key deliverables are annual market benchmarking, fee audits, legislative updates, and ongoing employee support over a five-year contract. A compulsory virtual briefing session is on 10 September 2026, and the tender closes on 22 September 2026.
Managed Cybersecurity Services Provider for NHBRC.
The National Home Builders Registration Council (NHBRC) seeks a Managed Cybersecurity Services Provider for a five-year contract. Services include 24/7/365 Security Operations Centre (SOC) operations, incident response, vulnerability management, penetration testing, and cyber awareness training. All SOC operations must occur within South Africa, covering the NHBRC head office and various offices nationwide. Deliverables include operational runbooks, risk reports, and maturity roadmaps. Bidders need five years of experience in enterprise-grade cybersecurity and must provide a detailed cost model. The tender uses the 80/20 preference point system.