Procurement of Patch Management Solution for Linux Servers

The Securities and Exchange Commission of Pakistan (SECP) is procuring a centralized Patch Management Solution specifically for Linux servers in Islamabad. This procurement covers the supply of licenses for 130 nodes/devices, deployment and configuration of the solution, and hands-on training for four SECP resources. The technical scope includes support for multiple Linux distributions such as Microsoft, CentOS, RHEL/OEL, and Ubuntu, along with third-party application patching. The solution must provide automated patch detection, classification, deployment, verification, and compliance reporting with a unified dashboard. It should also support scheduling, orchestration, access control, monitoring, logging, and security features including TLS encryption. Bidders must declare that the product is free from backdoors and unauthorized data access, and must not originate from India or Israel. Eligibility requires valid manufacturer authorization, minimum two years of experience delivering patch management solutions, and compliance with all mandatory technical specifications. The tender follows a Single Stage Two Envelope procedure with bids submitted exclusively through the EPADS portal by 1430 hours on June 8, 2026. The bids will be publicly opened the same day at 1500 hours at SECP's NICL Building, Islamabad. Bidders must submit earnest money of Rs. 100,000 in the form of a pay order or banker's cheque. A practical tip for bidders is to ensure all mandatory compliance items are fully addressed in the technical bid to avoid disqualification. Also, timely submission of original bid security before the closing time is critical to avoid rejection. This tender offers a significant opportunity for qualified IT service providers and software vendors to engage with a key federal regulatory authority in Pakistan.