Project 1026: Defensive programming against microarchitecture attacks (MicroScope)
At a glance
Bundesamt für Sicherheit in der Informationstechnik (Bonn, Germany) is tendering: Project 1026: Defensive programming against microarchitecture attacks (MicroScope). Offers are due 14 Oct 2026, 14:00 CEST. 12-month contract, 2 lots. Bidders must show, among other things: references, key people.
- 14 Oct 2026, 14:00 CEST
- Deadline
- 12 months
- Duration
- Open procedure
- Procedure
- IT services: consulting, software development, Internet and support (72000000)
- Main CPV
- 16 Sept 2026
- Published
Translated from the official notice. The original text is the legally binding one.
What the buyer wants
The aim of this project is to provide tools in the form of a guide and a tool for both public administration, industry and security research, which make it possible to increase the resilience of cloud applications in particular against microarchitecture attacks such as Spectre and Meltdown and newer representatives. Countermeasures of defensive programming at the application level should be in the foreground. This is to make the security of the software used more independent of the countermeasures of the cloud provider. In order to reach the largest possible target group, the results should be written in English. The guideline is intended to describe concrete, practical and easily applicable measures and the developed tool is intended to identify vulnerabilities automatically and, if necessary, mitigate them.
Technologies named
- Cloud applications
- Meltdown
- Spectre
Lots (2)
Lot 1Project 1026: Defensive programming against microarchitecture attacks (MicroScope)
12 monthsThe aim of this project is to provide tools in the form of a guide and a tool for both public administration, industry and security research, which make it possible to increase the resilience of cloud applications in particular against microarchitecture attacks such as Spectre and Meltdown and newer representatives. Countermeasures of defensive programming at the application level should be in the foreground. This is to make the security of the software used more independent of the countermeasures of the cloud provider. In order to reach the largest possible target group, the results should be written in English. The guideline is intended to describe concrete, practical and easily applicable measures and the developed tool is intended to identify vulnerabilities automatically and, if necessary, mitigate them.
Lot 2
12 months
Can you bid? Your readiness check
These are the conditions this notice asks bidders to prove. In SalesDots each one is checked against your company profile: certificates with their validity dates, delivered references and your people.
- In your profile
References
Similar contracts delivered before
- Not in your profile yet
Key people
security researcher · software developer
Detected automatically in the published notice. Always confirm against the tender documents.
Check it against my companyShow the notice text (1)
Self-declaration of Article 5k of Regulation (EU) 833/2014 2. Exclusion of a conflict of interest 3. References 4. Please see Chapter 6.2.1.3 of the specifications
How offers are scored
- Take details Please refer to Chapter 6.2.1.4 of the specifications
What this buyer bought before
Recent IT contracts awarded by the same buyer, from published award notices.
Monitoring des Identitätsmanagements in Zusammenspiel mit EU-Informationssystemen basierend auf nationalen TR-03156 Fachlogdaten
Winner: Process Intelligence Solutions GmbH · 2 bids
€438,383
28 Sept 2026
Chip-Imaging zur Überprüfung von Software zur Generierung von Netzlisten
Winner: IHP GmbH
€226,129
17 Jul 2026
Entwicklung einer KI-gestützten Lösung zur automatisierten Erstellung von Protokollen für Audio- und Videokonferenzen
Winner: IABG mbH
€140,429
2 Apr 2026
Standardisierung von Prüfkriterien und Prüfmethoden für (cloudbasierte) KI-Systeme 2 [AICRIS 2]
Winner: Deutsches Institut für Normung e.V.
€543,139
18 Dec 2025
P637 TP3 - Nationaler Biometric Matching Service 2.0; TP3: Acceptance Tests & Evaluation (NBMS 2.0 TP3)
Winner: Deloitte GmbH Wirtschaftsprüfungsgesellschaft
€442,750
28 Oct 2025
Projekt 674: ALC Re-Use: Methodology – Die Erstellung einer haromonisierten Methodologie für die Praxis (Erst. ALC Re-use Methodology)
Winner: Deutsche Telekom Security GmbH
€198,400
21 Feb 2025
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform.