Procurement of Threat and Exposure Management Tools DAST, SAST, SCA, DTM & Renewal of Infrastructure Vulnerability Assessment Tools (Nexpose) (Asset Qty = 1024)

The National Bank of Pakistan (ISD-RMG) invites sealed bids from eligible bidders for the procurement of advanced Threat and Exposure Management Tools including Dynamic Application Security Testing (DAST), Source Code Security Testing Tools (SAST, SCA, DTM), and renewal of Infrastructure Vulnerability Assessment Tools (Nexpose) with an asset quantity of 1024. This procurement is planned for the financial year 2026-27 and will be conducted through the National Bank of Pakistan's e-Pak Acquisition and Disposal System (EPADS) v2.0 platform. Items being procured: - Software Security Testing Tools (DAST) (License Qty = 01) - Source Code Security Testing Tools, SAST, SCA, DTM (User Qty = 12, Project Qty = 35) - Renewal of Infrastructure Vulnerability Assessment Tools (Nexpose) (Asset Qty = 1024) The scope includes delivery, installation, configuration, commissioning, and comprehensive warranty and support services available 24x7x365x4 for the license period. The solution must support on-premise installation, concurrent scanning, integration with issue trackers and CI/CD tools, and provide extensive training for NBP staff. Bidders must be registered entities in Pakistan with at least three years of relevant experience, valid FBR registration, and must provide audited financial statements showing a minimum aggregated revenue of Rs. 50 million over the last three years. Technical compliance with detailed specifications and licensing requirements is mandatory. Bids must be submitted electronically via EPADS v2.0 by Thursday, November 12, 2026 at 11:00 AM PKT. Original bid security must be submitted physically to the Procurement Division at NBP Head Office, Karachi before the deadline. Technical bids will be opened on the same day at 11:30 AM. Late or manual submissions will not be entertained. Interested bidders should register on EPADS v2.0 and refer to the detailed bidding documents available at https://epads.gov.pk/opportunities/federal/procurements/168903. A pre-bid meeting is not scheduled. Bidders are advised to carefully review eligibility criteria, bid security requirements, and evaluation methodology based on Least Cost Based Selection (LCBS). For successful participation, bidders should ensure timely submission of bids, compliance with all technical and financial requirements, and maintain readiness for post-award contract execution including training and support. The Procuring Agency reserves the right to reject any or all bids without assigning any reason. This procurement is a significant opportunity for suppliers specializing in cybersecurity tools and infrastructure vulnerability assessment to engage with a premier financial institution in Karachi, Sindh. Bidders are encouraged to prepare their proposals meticulously and leverage the EPADS platform for submission and communication. Contact Person: Project Manager Department Head (Tender) - LCMG, Procurement Division Phone: +92-213-890-2590 Email: qadir.khan@nbp.com.pk Submission Method: Electronic submission via EPADS v2.0 with physical submission of original bid security at NBP Head Office, Karachi. A practical tip for bidders: Ensure your EPADS registration is complete well before the deadline and verify all technical documents and bid security instruments comply fully with the bidding documents to avoid disqualification.