2026_PAAP_010 unified solution for vulnerability detection and mitigation

MINISTERUL FINANȚELORBucuresti, RomaniaNotice 725370-2026 · Reference number: 2026_PAAP_010

At a glance

MINISTERUL FINANȚELOR (Bucuresti, Romania) is tendering: 2026_PAAP_010 unified solution for vulnerability detection and mitigation. Offers are due 23 Nov 2026, 14:00 CET. Estimated value RON 8.2m, 3-month contract, 2 lots. Bidders must show, among other things: ISO 27001, ISO 9001, references.

Official noticeTender documents

Already a customer? Open it in the app

Translated from the official notice. The original text is the legally binding one.

Key facts

Deadline
RON 8.2m
Estimated value
3 months
Duration
Open procedure
Procedure
20 Oct 2026
Published
725370-2026
Notice number
2026_PAAP_010
Reference number
Computer platforms (30211300)
Main CPV
RO321
Place of performance (NUTS)
2
Lots
not allowed
Variant offers
Romanian
Language of offers

Dates

Every date of the notice and its changes, in order. Times: Brussels / Warsaw.

  1. Notice published

  2. Opening of offers

  3. Deadline for offers

What the buyer wants

unified solution for detection and mitigation of vulnerabilities according to the requirements of the Load Note.

CPV codes

  • 30211300Computer platformsmain

Lots (2)

The contract is divided into 2 lots. Offers may be submitted for selected lots where the documents allow it.

  1. Lot 1Default lot

    Estimated value:
    RON 8.2m
    Place (NUTS):
    RO321
    CPV:
    30211300 · Computer platforms

    unified solution for detection and mitigation of vulnerabilities according to the requirements of the Load Note.

  2. Lot 2

    Estimated value:
    RON 8.2m

Conditions for participation & required documents

What the notice asks bidders to prove, and the documents it requires. Full text below.

Conditions in the notice

  • CertificatesISO 27001 · ISO 9001
  • ReferencesSimilar contracts delivered before

Detected automatically in the published notice. Always confirm against the tender documents.

Show the notice text (3)

The DUAE shall be completed by the economic operators participating in the award procedure with the information related to their situation.

Methods of compliance: The contracting authority shall require that economic operators submitting tenders (individual tenderer / associate tenderer / proposed subcontractor / supporting third party) prove a form of registration under the law of the country of residence, showing that the economic operator is legally constituted, the structure of its shareholder / members, that it is not in any of the situations of cancellation of the constitution, and that it has the professional capacity to carry out the activities covered by the contract.

The contracting authority shall require the submission of a document issued by the National Trade Registry Office stating that the subject matter of the contract is related in the C.A.E.N. Code. For foreign legal / natural persons: documents proving a form of registration / attestation or professional membership. The documents will be presented together with the authorised translation in Romanian.

The finding certificate must certify that the company belongs to the professional category required by the performance of the contract and has an activity corresponding to the subject matter of the procurement. The information contained in the certificate must be real / valid at the date of presentation. The finding certificate will have to be submitted by the tenderer or the associate tenderer, if any, for the part of the contract he performs.

The supporting documents proving the fulfilment of those assumed by the completion of the DUAE are to be submitted at the request of the contracting authority, only by the highest bidder in the ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules are:

  1. The document issued by the ONRC which the contracting authority will obtain by questioning the ONRC database under Protocol No 308.813 / 23.06.2017, thereby reducing the administrative effort required to be submitted by the tenderers. In the case of foreign persons, documents proving the requirement similarly will be presented. The documents will be presented together with the authorised translation in Romanian.
  2. The document issued by the National Office of the Trade Register (N.R.C.) pursuant to Article 56 of Law No. 129 / 2019 to prevent and combat money laundering and terrorist financing and to amend and supplement certain normative acts, with subsequent amendments and additions. The statement submitted shall certify the beneficial ownership of the legal person and the way in which the control is exercised. In the case of foreign persons, documents proving the requirement similarly will be presented. The documents will be presented together with the authorised translation in Romanian.

Subject 1: To be completed DUAE in accordance with ANAP Notification No 240 / 2016. The supporting documents proving the fulfilment of those assumed by the completion of the DUAE shall be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.

Methods of compliance: Submission of the valid ISO 9001 certificate (simple copy signed by the legal representative) or other documents certifying the application of equivalent measures. Subject 2: To be completed DUAE in accordance with ANAP Notification No 240 / 2016.

The supporting documents proving the fulfilment of those assumed by the completion of the DUAE shall be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.

"The tenderer shall provide evidence of the possession of a specific certification proving compliance with the ISO / IEC 27001: 2022 quality management standard valid at the date of submission of the offer or other documents certifying the application of equivalent measures. Methods of compliance: Submission of the valid ISO / IEC 27001 certificate (simple copy signed by the legal representative) or other equivalent documents.

To be completed the DUAE in accordance with the ANAP Notification No 240 / 2016 in conjunction with the NOTIFICATION ANAP No 1 / 2021 on the possibility to supplement the DUAE provided by Commission Implementing Regulation (EU) 2016 / 7 of 5 January 2016 establishing the standard form for the European Single Procurement Document.

The tenderer (economic operator or members of the association of economic operators together) must provide evidence of similar related products and services provided in the last 3 years, calculated from the deadline for the submission of tenders, showing that he has supplied related products and services similar to those covered by the tender at the level of one or more contracts, with an indication of the values, data and public or private beneficiaries, in the aggregate amount of at least 5.000.000 lei without VAT.

The values of similar experience will be converted from the euro to the average leu / euro rate communicated by the National Bank of Romania for that year. Tenderers who have to convert currencies other than the euro will use the annual average exchange rates established by the European Central Bank. The provision of similar products means the provision of IT security equipment and solutions.

The calculation of the 3-year period will correspond to possible delays in the deadline set out in the initial published contract notice, in which case the deadline for submission of offers will be extended accordingly (by days) and the period of similar experience.

Methods of compliance: The supporting documents proving the fulfilment of those assumed by the completion of the DUAE are to be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.

These documents may be: acceptance minutes or record certificates or recommendations or any other documents issued or countersigned by the beneficiaries of the products and services in contracts invoked as similar experience. The documents must be presented in Romanian or accompanied by translation into Romanian by an authorised translator. In order to demonstrate that the minimum requirement for similar experience is met, any bidding economic operator shall be entitled to:

  1. to invoke the support of a third party, including when it also acts as a subcontractor, and to use its capacities to meet the minimum requirement, irrespective of the nature of the legal relationship between the bidder and the entity whose capacity it uses, under the terms of Article 182 of Law No 98 / 2016,
  2. to participate jointly with other economic operators in the award procedure, under the terms of Article 53 of Law No 98 / 2016.
EXAMPLE — not a result for your companyCan you bid? Your readiness check

This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.

9 met · 1 expiring · 2 missing · 2 to check

Conditions in this notice

  • ISO 27001certificate in the profile, valid on the bid dateIn your profile
  • ISO 9001renew before you bidExpires before the deadline
  • References3 matching references from the last 3 yearsIn your profile

Registers — checked automatically

  • National company registercompany active, representation matchesVerified
  • EU VAT (VIES)number active in VIESVerified
  • LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
  • Sanctions screeningcompany and owners not listedVerified

Company profile — matched to the requirements

  • ISO 22301add it or bring in a consortium partnerNot in your profile yet
  • Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
  • Solution architect — TOGAFno certified personNot in your profile yet
  • IT references, last 3 years3 public-sector implementationsIn your profile
  • Turnover, last 3 yearsfrom financial statementsIn your profile
  • Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
  • Security clearance (Poufne, NATO)to check in the teamNeeds a look

Award criteria

The full criteria and their weights, as published in the notice.

For all lots

  • The price of the offer70%

    Punctajul se acorda astfel: a) Pentru cel mai scazut dintre preturi se acorda punctajul maxim alocat; b) Pentru celelalte preturi ofertate punctajul P(n) se calculeaza proportional, astfel: P(n) = (Pret minim ofertat / Pret n) x punctaj maxim alocat.

  • Technical quality evaluation factor 1: Coverage and accuracy in identifying vulnerabilities10%

    • Pentru soluții cu acoperire medie (infrastructură și aplicații web, dar fără suport complet pentru containere și sisteme de tip cloud) se acordă 0 puncte. • Pentru soluții cu acoperire completă și integrată (infrastructură, aplicații web, containere și sisteme de tip cloud) se acordă 10 puncte. • Nu se acorda puncte intermediare.

  • Quality evaluation factor 2: Level of automation and integration into security processes10%

    • Pentru soluții care oferă automatizare parțială și integrare limitată (doar integrare cu soluții de tip SIEM si SOAR) se acordă 0 puncte. • Pentru soluții care oferă automatizare completă, fluxuri integrale și integrări extinse native (integrare nativă cu platforme externe de tip SIEM, SOAR, ITSM și DevOps) se acordă 10 puncte. • Nu se acorda puncte intermediare.

  • Technical quality evaluation factor 3: Native and unified integration capability between the offered solution modules10%

    • Se acordă 0 puncte dacă soluția ofertată asigura funcționalități de inventariere a activelor IT, funcționalități de detecție și remediere a vulnerabilităților, funcționalități de detecție și mitigare a amenințărilor de securitate, respectiv functionalități de detecție a vulnerabilităților la nivelul aplicațiilor web, dar nu oferă integrare nativă, complet automatizată și centralizată între toate modulele solicitate, necesitând soluții terțe sau intervenție manuală pentru corelare și prioritizare. • Se acordă 10 puncte dacă soluția ofertată oferă integrare nativă, complet automatizată și centralizată între toate modulele solicitate (funcționalități de inventariere a activelor IT, funcționalități de detecție și remediere a vulnerabilităților, funcționalități de detecție și mitigare a amenințărilor de securitate, functionalități de detecție a vulnerabilităților la nivelul aplicațiilor web), corelând vulnerabilitățile descoperite și prioritizând automat riscurile între infrastructură, containere și aplicații web. • Nu se acordă puncte intermediare.

Buyer

MINISTERUL FINANȚELOR

Address
Strada: Libertăţii, nr. 16, 050706 Bucuresti, Romania
Region (NUTS)
RO321

Register identifiers

LEI
315700IASY927EDWBK92
Registration no. in the notice
4221306

What this buyer bought before

110 IT contract award notices 2019–2026, €83m in total.

  • Contract subsecvent nr. 4 la acordul cadru nr. 767471/03.12.2025 de prestare servicii de mentenanță și suport tehnic pentru aplicația informatică FTI STAR

    Winner: FTI Treasury Systems & Solutions Ltd. Dublin

    €101,995

    19 Oct 2026

  • Servicii de întreținere, migrare și asistență tehnică software și hardware pentru platforma de acces, control și securitate F5 Networks

    Winner: METAMINDS · 1 bid

    RON 579,540

    2 Oct 2026

  • 2025_PAAP_014 Servicii de mentenanță software pentru Sistemul Informatic Integrat Vamal (SIIV) și componentele EMCS-RO

    Winner: Software Imagination & Vision · 1 bid

    RON 2.4m

    1 Oct 2026

  • 2025_PAAP_014 Servicii de mentenanță software pentru Sistemul Informatic Integrat Vamal (SIIV) și componentele EMCS-RO

    Winner: Software Imagination & Vision · 1 bid

    RON 19.1mFramework agreement — maximum value

    1 Oct 2026

  • 2026_PAP_HG61_006 Furnizare de echipamente IT (Computere portabile, imprimanta de tip multifunctional și ecrane)

    Winner: HERALD +1 more contractors

    RON 36,440

    24 Sept 2026

  • Servicii de mentenanță a sistemelor informatice de interoperabilitate în domeniul fiscal

    Winner: GLOBAL SOFTWARE SYSTEMS +1 more contractors · 1 bid

    RON 757,904

    31 Aug 2026

How to submit an offer

Offers are submitted only on the buyer's platform, before the deadline for offers.

yes
Electronic submission
no
Electronic auction

Questions & answers

What is the deadline for offers in "2026_PAAP_010 unified solution for vulnerability detection and mitigation"?

Offers are due by 23 Nov 2026, 14:00 CET.

What is the estimated value?

The estimated value published in the notice is RON 8.2m.

Who is the buyer?

MINISTERUL FINANȚELOR (Bucuresti, Romania); LEI 315700IASY927EDWBK92.

Where and how do I submit an offer?

Offers are submitted electronically on www.e-licitatie.ro.

Is the contract divided into lots?

Yes, into 2 lots.

How are offers scored?

The price of the offer 70%, Technical quality evaluation factor 1: Coverage and accuracy in identifying vulnerabilities 10%, Quality evaluation factor 2: Level of automation and integration into security processes 10%, Technical quality evaluation factor 3: Native and unified integration capability between the offered solution modules 10%.

Which procedure is used?

Open procedure.

Win it with SalesDots

Read the documents for you

SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.

Analyse documents

Match it with your profile

Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.

Check my fit

Prepare your response

Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.

Start a response

Never miss a change

Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.

Track this tender

Source: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 23 Oct 2026, 19:49 CEST.