Procurement of NBP Website Hosting and DDOS Protection Services

The National Bank of Pakistan (I.T) invites bids for the procurement of NBP Website Hosting and DDOS Protection Services for the financial year 2026-27. This procurement is managed by the National Bank of Pakistan (I.T) department located at the NBP Head Office Building, I.I Chundrigar Road, Karachi. The scope includes provision of non-consultancy services for secure, reliable, and uninterrupted availability of the corporate website and associated web services. Items being procured: - Website Hosting Services for NBP existing website (*.nbp.com.pk) with inline protection of 100+ Gbps on server and unlimited subdomains - Transfer/migration of NBP existing website to new hosting location - Hosting on platforms including ASP.NET Framework 4.0 or latest, SQL Server Enterprise 2016/2017 or latest, Internet Information Services 7.0 or latest, Windows Server 2019 or latest, RedHat Linux latest version - Dedicated server with minimum hardware: 2 x 3.4 Ghz Intel Xeon Quad Core or higher, 64 GB memory, 4 TB HDD Raid 5, hardware firewall, 100+ Gbps port, unlimited traffic - Secure FTP credentials for SFTP access - Secure remote SQL server connectivity - Hosting on servers in at least two countries including Pakistan with HA, cold state and auto sync - Cloudflare Enterprise Subscription or equivalent security services including DDOS protection, Web Application Firewall, Content Delivery Network - Real-time alerts for malicious activity - Customer portal with multi-user and role-based access - Access logs and monthly reports including WAF incident/event logs - DNS parking for domain nbp.com.pk - Helpdesk system and 24x7x365 support with 30-minute response time - SLA guaranteeing minimum 99.9% availability per calendar month with penalty clauses - Compliance with TIA-942 Rated Tier 3 Compliant Data Centre or equivalent - Content Delivery Network with static and dynamic content caching, client-side control, multi-location and multi-tier setup - DNS management and availability - Website Hosting Solution and DDOS Mitigation Services with 100+ Gbps protection The technical scope includes design, deployment, implementation, and support of the solution with professional implementation services from the principal supplier. The bidder must have a local presence in Pakistan with dedicated teams for pre-sales, sales, and support. The solution must be compatible with existing NBP infrastructure and comply with regulatory and security standards applicable to banking institutions. Eligibility criteria include registration as a legal entity in Pakistan, active taxpayer status, minimum 5 years relevant experience, Tier 1 partnership with principal supplier, minimum net worth of Rs. 10 million, and provision of at least four expert level certified resources. The bidder must submit all required documentation including manufacturer authorization, audited financial statements, and declarations. Key dates include bid submission deadline on August 13, 2026 at 11:00 AM via EPADS v2.0. Manual bids are not accepted. The bid opening will be on the same day at 11:30 AM. The contract period is three years with delivery within 16 weeks of contract award. Performance guarantee of 2% of contract price is required. Payment terms include 60% upon delivery and 40% after successful commissioning and operational acceptance. Warranty and maintenance services will be paid annually. A practical tip for bidders: Ensure complete and compliant submission of all technical and financial documents with proper references and signatures to avoid disqualification. Register early on EPADS v2.0 and familiarize yourself with the e-bidding process to avoid last-minute issues. Manual submission is not allowed, so electronic submission through EPADS is mandatory. This tender offers a significant opportunity for qualified IT service providers with expertise in website hosting and cybersecurity to partner with a leading financial institution in Pakistan. The detailed technical and eligibility requirements ensure that only capable and experienced bidders participate, promoting quality and reliability in service delivery.