AwardedServicesEuropeanOpen

Penetration Testing

Rijksdienst Caribisch Nederland · Open · 1 lots · 377033
Type
Services
72800000
Estimated value
€ 1,45M
estimated
To deadline
Ongoing
Knock-outs
0
exclusion grounds
Award basis
Best price-quality ratio
4 criteria
Assess manuallyconfidence high

This tender concerns the conclusion of a framework agreement with a maximum of five service providers for performing penetration testing for the Rijksdienst Caribisch Nederland. The award is based on the best price-quality ratio.

Services · Open · European procedure

European
Contracting authority
Contract type
Services
Open
Estimated value
€1,450,000
estimated value
Submission deadline
Ongoing
12:00
Scope
European
European procedure
Lots
1
1 lots
Main CPV code
Location
Netherlands
CharacteristicsCPV 72ServicesEU tender

01What is being requested

Performing penetration testing on applications, network components, and platforms for various departments of the Rijksdienst Caribisch Nederland via a framework agreement for a maximum of four years.

The purpose of the agreement is to realize penetration tests, both on-call and on-site, for various applications and platforms, among others.

72800000€ 1,45MServices
1Penetration Testing€1,450,000

02Strategic insight

Strategic insight · AI analysis
Provide a maximum of four references that meet the specific core competencies. Strictly adhere to the formal requirements for the quality descriptions, such as font and margins. Focus on proactivity and flexibility in the approach regarding the quality aspects.
Read automatically from the tender documents using AI. Always verify against the original documents.

03Points of attention

Important · 5
The maximum contract value is set at $1,450,000.Important
A page limit of a maximum of seven pages applies to the sub-award criteria.Important
The social return requirement concerns providing guest lectures on Bonaire.Important
Bidders must comply with the Russia sanctions package rules.Important
The mini-competition determines which party performs the work for each assignment.Important

04Can I take part?

Technical · 5
Experience in performing at least one penetration test at an organization with at least 150 employees.Technical
Experience in performing penetration testing on a platform with at least 300 active users.Technical
Experience in performing at least two penetration tests for one or two different clients simultaneously.Technical
Experience in performing a penetration test on software with an underlying infrastructure.Technical
Possession of all necessary licenses to perform the penetration tests.Technical
Professional capability · 1
Registration in the national professional or trade register (for BES islands: Chamber of Commerce extract not older than six months).Professional capability

05Exclusion grounds

Exclusion grounds — consult the ESPD
  • No specific exclusion grounds were extracted. In a European tender, the mandatory and discretionary grounds of art. 2.86/2.87 of the Dutch Procurement Act almost always apply — check the European Single Procurement Document (ESPD).

06Award criteria weighting

Sub-award criterion quality 1: Quality of service delivery 40%Sub-award criterion quality 2: Personnel 30%Sub-award criterion quality 3: Social return 10%Sub-award criterion Price: Hourly rate 20%
Homogeneous unit (%) · sum 100% · gate passed

07Value in context

€1,450,000

08Bidders in this segment

#Likely bidderFitWins
1COMPAREX Nederland B.V.SME9130×
2KPN B.V.SME9027×
3Protinus IT B.V.SME8932×
4Ordina Unknown8920×
5Bechtle direct B.V.SME8825×
6PQR B.V.SME8825×

09Tender documents

20250528-Nota van Inlichtingen 2-1.0DEFpdfMay 30, 2025 · 263 KB
Nota van inlichtingen 2025-05-29-1pdfMay 30, 2025 · 27 KB
Nota van inlichtingen 2025-05-29-2pdfMay 30, 2025 · 27 KB
Beschrijvend document - Europese openbare aanbesteding pentesten v3pdfMay 30, 2025 · 418 KB
Bijlage 3 - Prijzenblad v3xlsxMay 30, 2025 · 11 KB
20250519-Nota van Inlichtingen 1-1.0DEF v2pdfMay 19, 2025 · 249 KB
Nota van inlichtingen 2025-05-16-1pdfMay 16, 2025 · 6 KB
Bijlage 11 - Concept Nadere Offerteaanvraag v2pdfMay 16, 2025 · 253 KB
Bijlage 4 - Referentieverklaring v2docxMay 16, 2025 · 287 KB
Bijlage 2 - Conformiteitenlijst Eisen v2pdfMay 16, 2025 · 141 KB
20250516-Nota van Inlichtingen 1-1.0DEFpdfMay 16, 2025 · 219 KB
Bijlage 13 - VragenformulierxlsMay 1, 2025 · 42 KB

10Legal themes that may be relevant here

11Frequently asked questions

What is the scope of work regarding penetration testing?
The agreement includes performing penetration tests in various variants, including blackbox, greybox, and whitebox. Source code reviews may be part of the penetration test.
Do Red Team assignments and social engineering fall under this assignment?
No, Red Team assignments, including various forms of social engineering, fall outside the scope of this tender. The focus is exclusively on penetration testing.
How are the specific assignments within the framework contract awarded?
The contracting authority determines per penetration test which counterparty performs the assignment through a mini-competition. Where possible, requests are bundled per quarter.
Which technologies and platforms are used within the IT landscape?
The bi-informed platform and so class are used, among others. The applications and networks are partly developed and managed by the client themselves, and partly by suppliers.

Automatically compiled from the official tender data and documents.

12Estimated value versus the market

p25
€ 327K
median
€ 800K
p75
€ 2,5 mln
€ 1,4 mln

Gegunde waarden in CPV 72 · diensten n=1436