Procurement of ASV for External Vulnerability Scans.
Wilfred Vusi Maditsi
In plain English
Postbank is procuring services from a qualified Approved Scanning Vendor (ASV) to perform nonintrusive external vulnerability scans on its systems for 3 years. Bidders must comply with PCI DSS and be able to provide a compliant solution.
Always check the official documentDescription
Postbank (SOC) Ltd is seeking a qualified Approved Scanning Vendor to perform non-intrusive external vulnerability scans on its systems. The work will take place over a three-year period. The service provider must conduct quarterly scans on external IP addresses and domain endpoints to ensure compliance with PCI DSS standards. Key deliverables include detailed vulnerability reports, executive summaries, and formal Attestations of Compliance after each scan. The vendor is also expected to provide guidance on fixing identified security risks. This project aims to maintain high security and regulatory standards for Postbank's digital infrastructure.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Must hold valid PCI SSC Approved Scanning Vendor (ASV) certification
- Must have valid Tax Compliance Status (TCS) or SARS PIN
- Must be registered on the Central Supplier Database (CSD)
Contact & how to apply
Name: Wilfred Vusi Maditsi
Email: vusi.maditsi@Posttbank.co.za
Phone: 076-706-9269
How to apply: Bid responses must be submitted via email to RFP@PostBank.co.za by 11:00 am on 24 July 2026.
Related tenders
Service Provider for Electronic Procurement System.
The National Treasury seeks a service provider to design, develop, implement, and support an electronic procurement system over 36 months. The project includes creating a digital platform for the procurement lifecycle, with features like a digital marketplace, AI-assisted risk detection, and integration with systems such as CSD and SARS. The project will be phased over three years, focusing on core platform development, functional expansion, and stabilization.
Service Provider for Personnel Vetting and Security Checks.
The South African Environmental Observation Network (SAEON) seeks a service provider for personnel vetting and security clearance checks over three years. Tasks include obtaining SAPS Police Clearance Certificates, conducting checks on the National Register for Sex Offenders, and verifying the National Child Protection Register for about 200 individuals. The provider must deliver individual and summary clearance reports, ensuring data confidentiality and compliance with POPIA regulations, to secure personnel handling sensitive information or working with vulnerable persons.
Procurement of PKI Solution with Maintenance and Support.
The State Security Agency (SSA) seeks bids for the procurement, implementation, and five-year maintenance of a Public Key Infrastructure (PKI) solution at SSA Headquarters in Pretoria. Deliverables include FIPS 140-3 Level 3 certified Hardware Security Modules, encryption software, and identity management systems. The bidder must provide technical architecture, installation, configuration, and training for 20 users. The solution requires disaster recovery capabilities and bidders must have three years of PKI experience meeting ISO 21188 and WebTrust standards. The contract includes a five-year support period with fixed pricing for the first year. Tender closes on 13 July 2026 at 11:00.
Comprehensive Security Threat and Risk Assessment for SAAT.
South African Airways Technical (SAAT) seeks a service provider for a comprehensive Threat and Risk Assessment. The project includes identifying security threats, analyzing vulnerabilities, and designing a risk-based Close Protection model for investigative functions at SAAT facilities. It involves stakeholder engagement through interviews and workshops. Deliverables include an inception report, a detailed threat and risk assessment report, an executive summary, and a formal management presentation. The project duration is 4 to 6 weeks, with a 24-month service agreement.
Dark Web Monitoring and Digital Risk Detection Solution.
Sasria SOC Limited seeks bids for a SaaS-based platform to monitor the dark, deep, and open web for cyber threats, brand abuse, and data exposure. The 36-month contract includes system configuration, integration with security tools, and role-based training. The provider must offer technical documentation and support, comply with POPIA, and meet cybersecurity certification requirements. Work is based in Johannesburg.
Supply and Installation of VDF Systems at Various Locations
Air Traffic and Navigation Services (ATNS) invites tenders for the VDF Replacement Project. This involves the procurement, supply, installation, and commissioning of VHF Direction Finder systems at Richards Bay, Virginia, Pilanesberg, Grand Central, and the ATNS Aviation Training Academy. The project includes decommissioning old systems, site surveys, system design, and a 15-year logistics support and maintenance plan. It requires training for technical staff and adherence to international aviation standards, with a 24-month implementation period and a 12-month Period of Beneficial Use. Fixed pricing in Rands is required for the acquisition phase, with all work adhering to safety, environmental, and technical regulations.