2026_PAAP_010 unified solution for vulnerability detection and mitigation
At a glance
MINISTERUL FINANȚELOR (Bucuresti, Romania) is tendering: 2026_PAAP_010 unified solution for vulnerability detection and mitigation. Offers are due 23 Nov 2026, 14:00 CET. Estimated value RON 8.2m, 3-month contract, 2 lots. Bidders must show, among other things: ISO 27001, ISO 9001, references.
Already a customer? Open it in the app
Translated from the official notice. The original text is the legally binding one.
Key facts
- Deadline
- RON 8.2m
- Estimated value
- 3 months
- Duration
- Open procedure
- Procedure
- 20 Oct 2026
- Published
- 725370-2026
- Notice number
- 2026_PAAP_010
- Reference number
- Computer platforms (30211300)
- Main CPV
- RO321
- Place of performance (NUTS)
- 2
- Lots
- not allowed
- Variant offers
- Romanian
- Language of offers
Dates
Every date of the notice and its changes, in order. Times: Brussels / Warsaw.
Notice published
Opening of offers
Deadline for offers
What the buyer wants
unified solution for detection and mitigation of vulnerabilities according to the requirements of the Load Note.
CPV codes
- 30211300Computer platformsmain
Lots (2)
The contract is divided into 2 lots. Offers may be submitted for selected lots where the documents allow it.
Lot 1Default lot
- Estimated value:
- RON 8.2m
- Place (NUTS):
- RO321
- CPV:
- 30211300 · Computer platforms
unified solution for detection and mitigation of vulnerabilities according to the requirements of the Load Note.
Lot 2
- Estimated value:
- RON 8.2m
Conditions for participation & required documents
What the notice asks bidders to prove, and the documents it requires. Full text below.
Conditions in the notice
- CertificatesISO 27001 · ISO 9001
- ReferencesSimilar contracts delivered before
Detected automatically in the published notice. Always confirm against the tender documents.
Show the notice text (3)
The DUAE shall be completed by the economic operators participating in the award procedure with the information related to their situation.
Methods of compliance: The contracting authority shall require that economic operators submitting tenders (individual tenderer / associate tenderer / proposed subcontractor / supporting third party) prove a form of registration under the law of the country of residence, showing that the economic operator is legally constituted, the structure of its shareholder / members, that it is not in any of the situations of cancellation of the constitution, and that it has the professional capacity to carry out the activities covered by the contract.
The contracting authority shall require the submission of a document issued by the National Trade Registry Office stating that the subject matter of the contract is related in the C.A.E.N. Code. For foreign legal / natural persons: documents proving a form of registration / attestation or professional membership. The documents will be presented together with the authorised translation in Romanian.
The finding certificate must certify that the company belongs to the professional category required by the performance of the contract and has an activity corresponding to the subject matter of the procurement. The information contained in the certificate must be real / valid at the date of presentation. The finding certificate will have to be submitted by the tenderer or the associate tenderer, if any, for the part of the contract he performs.
The supporting documents proving the fulfilment of those assumed by the completion of the DUAE are to be submitted at the request of the contracting authority, only by the highest bidder in the ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules are:
- The document issued by the ONRC which the contracting authority will obtain by questioning the ONRC database under Protocol No 308.813 / 23.06.2017, thereby reducing the administrative effort required to be submitted by the tenderers. In the case of foreign persons, documents proving the requirement similarly will be presented. The documents will be presented together with the authorised translation in Romanian.
- The document issued by the National Office of the Trade Register (N.R.C.) pursuant to Article 56 of Law No. 129 / 2019 to prevent and combat money laundering and terrorist financing and to amend and supplement certain normative acts, with subsequent amendments and additions. The statement submitted shall certify the beneficial ownership of the legal person and the way in which the control is exercised. In the case of foreign persons, documents proving the requirement similarly will be presented. The documents will be presented together with the authorised translation in Romanian.
Subject 1: To be completed DUAE in accordance with ANAP Notification No 240 / 2016. The supporting documents proving the fulfilment of those assumed by the completion of the DUAE shall be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.
Methods of compliance: Submission of the valid ISO 9001 certificate (simple copy signed by the legal representative) or other documents certifying the application of equivalent measures. Subject 2: To be completed DUAE in accordance with ANAP Notification No 240 / 2016.
The supporting documents proving the fulfilment of those assumed by the completion of the DUAE shall be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.
"The tenderer shall provide evidence of the possession of a specific certification proving compliance with the ISO / IEC 27001: 2022 quality management standard valid at the date of submission of the offer or other documents certifying the application of equivalent measures. Methods of compliance: Submission of the valid ISO / IEC 27001 certificate (simple copy signed by the legal representative) or other equivalent documents.
To be completed the DUAE in accordance with the ANAP Notification No 240 / 2016 in conjunction with the NOTIFICATION ANAP No 1 / 2021 on the possibility to supplement the DUAE provided by Commission Implementing Regulation (EU) 2016 / 7 of 5 January 2016 establishing the standard form for the European Single Procurement Document.
The tenderer (economic operator or members of the association of economic operators together) must provide evidence of similar related products and services provided in the last 3 years, calculated from the deadline for the submission of tenders, showing that he has supplied related products and services similar to those covered by the tender at the level of one or more contracts, with an indication of the values, data and public or private beneficiaries, in the aggregate amount of at least 5.000.000 lei without VAT.
The values of similar experience will be converted from the euro to the average leu / euro rate communicated by the National Bank of Romania for that year. Tenderers who have to convert currencies other than the euro will use the annual average exchange rates established by the European Central Bank. The provision of similar products means the provision of IT security equipment and solutions.
The calculation of the 3-year period will correspond to possible delays in the deadline set out in the initial published contract notice, in which case the deadline for submission of offers will be extended accordingly (by days) and the period of similar experience.
Methods of compliance: The supporting documents proving the fulfilment of those assumed by the completion of the DUAE are to be submitted at the request of the contracting authority, only by the highest bidder in the intermediate ranking drawn up following the application of the award criterion, as provided for in Article 132 (2) of the Rules.
These documents may be: acceptance minutes or record certificates or recommendations or any other documents issued or countersigned by the beneficiaries of the products and services in contracts invoked as similar experience. The documents must be presented in Romanian or accompanied by translation into Romanian by an authorised translator. In order to demonstrate that the minimum requirement for similar experience is met, any bidding economic operator shall be entitled to:
- to invoke the support of a third party, including when it also acts as a subcontractor, and to use its capacities to meet the minimum requirement, irrespective of the nature of the legal relationship between the bidder and the entity whose capacity it uses, under the terms of Article 182 of Law No 98 / 2016,
- to participate jointly with other economic operators in the award procedure, under the terms of Article 53 of Law No 98 / 2016.
This is the SalesDots check: every condition in the notice, the company registers and your whole company profile — certificates with expiry dates, team, references and financials — in one place. The results below are an example; you see the real one after signing in.
9 met · 1 expiring · 2 missing · 2 to check
Conditions in this notice
- ISO 27001certificate in the profile, valid on the bid dateIn your profile
- ISO 9001renew before you bidExpires before the deadline
- References3 matching references from the last 3 yearsIn your profile
Registers — checked automatically
- National company registercompany active, representation matchesVerified
- EU VAT (VIES)number active in VIESVerified
- LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
- Sanctions screeningcompany and owners not listedVerified
Company profile — matched to the requirements
- ISO 22301add it or bring in a consortium partnerNot in your profile yet
- Project manager — PMP / PRINCE22 people, 5+ years of experienceIn your profile
- Solution architect — TOGAFno certified personNot in your profile yet
- IT references, last 3 years3 public-sector implementationsIn your profile
- Turnover, last 3 yearsfrom financial statementsIn your profile
- Partner status (Microsoft, SAP, Oracle)to confirm with the vendorNeeds a look
- Security clearance (Poufne, NATO)to check in the teamNeeds a look
Award criteria
The full criteria and their weights, as published in the notice.
For all lots
- The price of the offer70%
Punctajul se acorda astfel: a) Pentru cel mai scazut dintre preturi se acorda punctajul maxim alocat; b) Pentru celelalte preturi ofertate punctajul P(n) se calculeaza proportional, astfel: P(n) = (Pret minim ofertat / Pret n) x punctaj maxim alocat.
- Technical quality evaluation factor 1: Coverage and accuracy in identifying vulnerabilities10%
• Pentru soluții cu acoperire medie (infrastructură și aplicații web, dar fără suport complet pentru containere și sisteme de tip cloud) se acordă 0 puncte. • Pentru soluții cu acoperire completă și integrată (infrastructură, aplicații web, containere și sisteme de tip cloud) se acordă 10 puncte. • Nu se acorda puncte intermediare.
- Quality evaluation factor 2: Level of automation and integration into security processes10%
• Pentru soluții care oferă automatizare parțială și integrare limitată (doar integrare cu soluții de tip SIEM si SOAR) se acordă 0 puncte. • Pentru soluții care oferă automatizare completă, fluxuri integrale și integrări extinse native (integrare nativă cu platforme externe de tip SIEM, SOAR, ITSM și DevOps) se acordă 10 puncte. • Nu se acorda puncte intermediare.
- Technical quality evaluation factor 3: Native and unified integration capability between the offered solution modules10%
• Se acordă 0 puncte dacă soluția ofertată asigura funcționalități de inventariere a activelor IT, funcționalități de detecție și remediere a vulnerabilităților, funcționalități de detecție și mitigare a amenințărilor de securitate, respectiv functionalități de detecție a vulnerabilităților la nivelul aplicațiilor web, dar nu oferă integrare nativă, complet automatizată și centralizată între toate modulele solicitate, necesitând soluții terțe sau intervenție manuală pentru corelare și prioritizare. • Se acordă 10 puncte dacă soluția ofertată oferă integrare nativă, complet automatizată și centralizată între toate modulele solicitate (funcționalități de inventariere a activelor IT, funcționalități de detecție și remediere a vulnerabilităților, funcționalități de detecție și mitigare a amenințărilor de securitate, functionalități de detecție a vulnerabilităților la nivelul aplicațiilor web), corelând vulnerabilitățile descoperite și prioritizând automat riscurile între infrastructură, containere și aplicații web. • Nu se acordă puncte intermediare.
Buyer
MINISTERUL FINANȚELOR
- Address
- Strada: Libertăţii, nr. 16, 050706 Bucuresti, Romania
- Region (NUTS)
- RO321
- Website
- www.mfinante.ro
Register identifiers
- LEI
- 315700IASY927EDWBK92
- Registration no. in the notice
- 4221306
What this buyer bought before
110 IT contract award notices 2019–2026, €83m in total.
Contract subsecvent nr. 4 la acordul cadru nr. 767471/03.12.2025 de prestare servicii de mentenanță și suport tehnic pentru aplicația informatică FTI STAR
Winner: FTI Treasury Systems & Solutions Ltd. Dublin
€101,995
19 Oct 2026
Servicii de întreținere, migrare și asistență tehnică software și hardware pentru platforma de acces, control și securitate F5 Networks
Winner: METAMINDS · 1 bid
RON 579,540
2 Oct 2026
2025_PAAP_014 Servicii de mentenanță software pentru Sistemul Informatic Integrat Vamal (SIIV) și componentele EMCS-RO
Winner: Software Imagination & Vision · 1 bid
RON 2.4m
1 Oct 2026
2025_PAAP_014 Servicii de mentenanță software pentru Sistemul Informatic Integrat Vamal (SIIV) și componentele EMCS-RO
Winner: Software Imagination & Vision · 1 bid
RON 19.1mFramework agreement — maximum value
1 Oct 2026
2026_PAP_HG61_006 Furnizare de echipamente IT (Computere portabile, imprimanta de tip multifunctional și ecrane)
Winner: HERALD +1 more contractors
RON 36,440
24 Sept 2026
Servicii de mentenanță a sistemelor informatice de interoperabilitate în domeniul fiscal
Winner: GLOBAL SOFTWARE SYSTEMS +1 more contractors · 1 bid
RON 757,904
31 Aug 2026
How to submit an offer
Offers are submitted only on the buyer's platform, before the deadline for offers.
- www.e-licitatie.ro
- Platform
- yes
- Electronic submission
- no
- Electronic auction
Questions & answers
What is the deadline for offers in "2026_PAAP_010 unified solution for vulnerability detection and mitigation"?
Offers are due by 23 Nov 2026, 14:00 CET.
What is the estimated value?
The estimated value published in the notice is RON 8.2m.
Who is the buyer?
MINISTERUL FINANȚELOR (Bucuresti, Romania); LEI 315700IASY927EDWBK92.
Where and how do I submit an offer?
Offers are submitted electronically on www.e-licitatie.ro.
Is the contract divided into lots?
Yes, into 2 lots.
How are offers scored?
The price of the offer 70%, Technical quality evaluation factor 1: Coverage and accuracy in identifying vulnerabilities 10%, Quality evaluation factor 2: Level of automation and integration into security processes 10%, Technical quality evaluation factor 3: Native and unified integration capability between the offered solution modules 10%.
Which procedure is used?
Open procedure.
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 23 Oct 2026, 19:49 CEST.