Supply and Implementation of Qualys VMDR Platform for SAA
Rubina Data
In plain English
South African Airways is procuring the Qualys Vulnerability Management, Detection and Response platform. Bidders must be Qualys accredited partners or authorised resellers with experience in enterprise environments.
Always check the official documentDescription
South African Airways (SAA) is requesting quotations for the supply, licensing, implementation, and configuration of the Qualys Vulnerability Management, Detection and Response (VMDR) platform. This project includes Policy Compliance and Web Application Scanning as a managed service. The work will be performed for SAA. The solution must cover at least 3,400 assets with a 10% growth buffer and include scanning for 30 web applications. Key deliverables include continuous vulnerability tracking, asset discovery, and compliance reporting against ISO/IEC 27001 standards. The implementation must be completed within a preferred timeframe of 0 to 8 weeks. The tender (GSM078/2026) was issued on 13 October 2026 and closes on 19 October 2026. Bidders must demonstrate 5 years of enterprise-level experience and provide a team of certified specialists.
What you need to qualify
- CSD registration — Registration on the Central Supplier Database — required to do business with government.
- Tax clearance — A valid SARS tax compliance status (PIN) showing your tax affairs are in order.
- B-BBEE certificate — A B-BBEE certificate or sworn affidavit confirming your contribution level.
Full requirements
- Must be a Qualys authorized reseller or partner
- Valid Tax Clearance Certificate or SARS pin
- Valid B-BBEE certificate or sworn affidavit
- Registered on the Central Supplier Database (CSD)
- Minimum 5 years of enterprise-level experience
- Certified professional certifications and CVs for key technical personnel
- Sample operational and compliance reports from 5 enterprise customers
Contact & how to apply
Name: Rubina Data
Email: RubinaData@flysaa.com
Phone: 011-978-2155
How to apply: Submit your application via email to Tenders@flysaa.com. Ensure that each email does not exceed 2MB in size. If your files are larger, you may send them in multiple parts or provide a secure downloadable link.
Related tenders
Sale of Surplus and Obsolete Aircraft Spares.
South African Airways (SAA) and South African Airways Technical (SAAT) are requesting proposals for the purchase of surplus and obsolete aircraft spares. The inventory includes approximately 41,761 items, such as consumables, consumable-repairables, and rotables, sold 'AS-IS' at SAA Technical, Jones Road, Kempton Park. Viewing is by appointment from 23 September 2026 to 14 October 2026. The successful bidder must remove all materials within 90 days of the award. Bids are due by 11:00 AM on 21 October 2026, and the tender is valid for 180 days from the closing date.
Supply and Installation of AV Equipment for ACSA.
The Airports Company South Africa (ACSA) seeks a service provider for the supply, installation, decommissioning, and disposal of audio-visual and video conferencing equipment across multiple locations, including OR Tambo, Cape Town, King Shaka, and other regional airports. The project includes installing LED video walls, conferencing systems, and room displays, providing user training and asset management, and integrating systems with Microsoft Teams. The contract duration is 24 months, with strict adherence to technical specifications and safety standards. A compulsory briefing and site inspection will be held at OR Tambo International Airport on 6 October 2026.
Procurement of DNS Security Managed Services.
Eskom Holdings SOC Ltd invites tenders for a five-year contract for DNS Security Managed Services, including one year for implementation and four years for maintenance and support. The project involves deploying a hardware-based DNS security suite, IP Address Management, and real-time threat detection across Eskom data centres. Key deliverables include system configuration, integration with existing security platforms, and 24/7/365 technical support. The project starts on 1 December 2026, requiring a dedicated project manager and compliance with IETF standards and SOC 2 requirements. Skills development and a Quality Management System are also required.
Renewal of Tenable Nessus Software Licenses
PetroSA seeks a service provider for renewing Tenable Nessus Professional Software Vulnerability licenses. The project requires unlimited IP coverage for one year, with options for two additional renewals. The software must support vulnerability scanning, ad-hoc scans, audit trails, and integrate with existing systems. Advanced technical support is required. A comprehensive commercial bid and quotation are needed for a secure vulnerability management program.
Cyber Security Enhancement for City Power Johannesburg
City Power Johannesburg (SOC) Ltd seeks a qualified ICT Security Services Partner to implement a Network Detection and Response (NDR) solution. The project aims to enhance cyber security through advanced threat hunting, automated response, and continuous network monitoring. It includes the supply of hardware and software, system design, integration with existing security tools, and ongoing maintenance. Key deliverables are a pre-deployment assessment, system configuration, administrator training, and technical support. Bidders must achieve a minimum technical functionality score of 80% to qualify. The contract requires adherence to strict incident management response times and compliance with international security standards. The closing date is 15 October 2026 at 11h00.
Managed Services for MQA Backup and Disaster Recovery
The Mining Qualifications Authority (MQA) seeks a service provider for managed services covering Backup, Disaster Recovery (DR), and a DR Site solution. The contract, lasting 38 months until 31 March 2030, requires hosting primary and secondary sites in South Africa, a 50 Mbps dedicated fibre link, and 99.95% availability. Responsibilities include data migration, 24/7 support, software licensing, quarterly and annual DR tests, and a retention policy for backups. Services will be conducted at the MQA Head Office in Parktown and off-site. A compulsory briefing session is on 6 October 2026.