This tender invites bids for the procurement of Vulnerability Assessment and Penetration Testing (VAPT) tools and licenses at NADRA Headquarters in Islamabad, under the National Database and Registration Authority (NADRA). The procurement falls under the IT Software & Licenses category and is scheduled for delivery within 2 to 4 weeks after contract signing. The scope includes licenses for SonarQube Enterprise Edition for static code analysis and IDA Pro for reverse engineering, with subscription periods of one and two years respectively. The procurement is conducted under a single stage two envelope procedure with electronic bidding through EPADS, ensuring transparency and compliance with Public Procurement Rules 2004. The technical specifications require the tools to support large-scale development integration and binary analysis, with mandatory compliance to eligibility and qualification criteria including valid registrations, tax compliance, and financial capability. The delivery location is NADRA Headquarters, Sector G-5/2, Islamabad. Payment terms include 10% advance against bank guarantee and 90% upon delivery and verification of licenses. Performance security of 10% of contract value is required. Liquidated damages apply at 0.1% per day up to 10% of delayed item value. Bidders must be authorized OEMs or their authorized agents, excluding entities from India and Israel. The tender emphasizes compliance with PEC categories, FBR ATL status, and 2025-26 financial year requirements. Submission deadline is 19th February 2026 at 11:00 am, with bid opening at 11:30 am the same day at NADRA HQ. Bids must be submitted electronically via EPADS; manual bids are not accepted. Pro-Tip: Ensure the original hard copy of the bid security is submitted on time to avoid disqualification of the electronic bid. Also, carefully review the technical compliance annexures and attach all required documents to avoid rejection. Check the newspaper ad for any specific stamp duty requirements which are often overlooked.