Supply and Implementation of Qualys VMDR TruRisk Platform.
Rubina Data
In plain English
South African Airways is procuring the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform. Bidders must be Qualys accredited partners or authorised resellers with experience in enterprise environments.
Always check the official documentDescription
South African Airways (SAA) invites bids for the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) TruRisk platform. This includes Policy Compliance and Web Application Scanning services. The project requires the management of 3,400 assets with a 10% growth buffer. The service provider will handle day-to-day vulnerability tracking, asset discovery, and compliance reporting against industry standards like ISO/IEC 27001. The work will be performed for SAA, and bidders must provide a detailed implementation timeline, with preference given to those completing onboarding within 0-6 weeks. The closing date for this tender (RFQ 061/2026) is 31 August 2026 at 16:00.
What you need to qualify
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- Other registration — An industry registration the tender requires (e.g. PSIRA, NHBRC, a professional or trade licence).
Full requirements
- Must be a Qualys accredited partner or authorised reseller
- Must provide valid Tax Clearance Certificate or SARS pin
- Must provide evidence of previous enterprise-level delivery
- Must provide technical evidence from five enterprise customers
- Must provide CVs and certifications for three specified technical roles
Contact & how to apply
Name: Rubina Data
Email: RubinaData@flysaa.com
Phone: 011-978-2155
How to apply: Submit quotations via email to Tenders@flysaa.com. Ensure all documentation is attached and the total email size does not exceed 2MB per transmission.
Related tenders
Supply and Support of Patch Management Solution for SAWS.
The South African Weather Service (SAWS) seeks a service provider for a three-year contract to supply, implement, and support an enterprise-grade Patch and Vulnerability Management solution. The project includes a unified platform for scanning, asset discovery, and automated patch deployment across various operating systems. The provider must manage end-to-end deployment, offer six months of post-implementation support, and conduct knowledge transfer for SAWS ICT staff. Integration with existing security tools like Microsoft Sentinel and Active Directory is required. A compulsory briefing session is scheduled for 17 August 2026.
Third-Party Risk Management Solution Implementation.
Sasria SOC Limited seeks proposals for implementing and supporting a Third-Party Risk Management solution over three years. The project includes deploying a cloud-hosted SaaS platform for vendor risk management, covering onboarding, monitoring, and reporting. It involves initial configuration, system integration, staff training, and ongoing technical support. Deliverables include a risk management dashboard, API integrations, and a support service level agreement, aiming to enhance governance and data security.
Provision of GRC Software Solution and Support.
The South African Civil Aviation Authority (SACAA) seeks a service provider for an off-the-shelf Governance, Risk, and Compliance (GRC) software solution, including a five-year support and maintenance contract. The project requires a web-based, modular system for managing enterprise risk, internal audits, legal compliance, and quality assurance, with integration capabilities and data migration from the current BarnOwl system. The provider must supply 129 user licenses, conduct staff training, and have at least five years of GRC software deployment experience with three contactable references. The project team leader must have a recognized project management certification and five years of relevant experience.
RFQ for ULD Management Outsourcing.
South African Airways seeks information on outsourcing Unit Load Device (ULD) management to improve asset control, maintenance, repair, and digital tracking for cargo and baggage operations. Interested parties should demonstrate capabilities in fleet provision, logistics support, and repair network management across SAA routes. This is an information-gathering exercise to assess market feasibility for future procurement. Submissions are due by 28 August 2026 at 16:00.
Panel for Baggage Delivery Services for SAA.
South African Airways (SAA) seeks service providers for door-to-door delivery of delayed luggage. Services include weighing, wrapping, and sealing bags to prevent tampering. Providers must operate at OR Tambo, King Shaka, Cape Town, and Chief Dawid Stuurman International Airports. Key requirements include a 30-minute response time, dispatching deliveries within 30 minutes, and meeting delivery timeframes. A coordinator is required at each airport. Vehicles must be roadworthy 1-tonners with tracking devices and lockable canopies. The tender (RFQ GSM060/2026) was issued on 20 August 2026, with a briefing on 27 August 2026. Submissions close on 31 August 2026 at 16:00.
Supply and Installation of Antivirus Software for Municipality.
The Moqhaka Local Municipality seeks a service provider for the supply, delivery, and installation of antivirus software with 36 months of technical support for 350 users and 20 servers. Key services include endpoint security, malware protection, network threat protection, and Managed Detection and Response (MDR). Training on advanced security solutions and a detailed project implementation plan are required. The project is based in Kroonstad, with a compulsory briefing on 05 August 2026. The tender closes on 07 September 2026.