Renewal of Checkmarx license integration implementation

Nemzeti Adó- és VámhivatalBudapest, HungaryNotice 770550-2026 · Reference number: EKR001829772026

At a glance

Nemzeti Adó- és Vámhivatal (Budapest, Hungary) is tendering: Renewal of Checkmarx license integration implementation. Offers are due 19 Nov 2026, 10:00 CET. 36-month contract. Bidders must show, among other things: certificates, references, key people.

Official noticeTender documents

Already a customer? Open it in the app

Translated from the official notice. The original text is the legally binding one.

Key facts

Deadline
not published
Estimated value
36 months
Duration
Open procedure
Procedure
5 Nov 2026
Published
770550-2026
Notice number
EKR001829772026
Reference number
Development software package (48983000)
Main CPV
HU110
Place of performance (NUTS)

The buyer did not publish an estimated value in the notice.

Dates

Every date of the notice and its changes, in order. Times: Brussels / Warsaw.

  1. Notice published

  2. Deadline for offers

  3. Opening of offers

  4. Offers binding until (computed)computed

    30 days from the deadline for offers, per the notice

What the buyer wants

The aim of the procurement is to acquire the next 3-year right of use (hereinafter "Solutions') of the Checkmarx Security Source Code Analysis System (SAST and SCA) currently in use at NAVA, and to extend the current system according to the changed needs, which is capable of supporting persons involved in application development (programmers, quality insurers, testers, security auditors, etc.) in identifying security errors in the source code and software components, then improving and enabling the monitoring of the errors identified after repair.

Type of licenses and related services requested: Article 1: Cx-Volume-Projects- Subscription, designation: Checkmarx Volume Subscription, CX SDLC Projects, 100 Project, 20 user, SAST, 3 year subscription, monthly 4-hour Checkmarx Engineering Support, Article 2: CX- SCA, Name: Checkmarx SCA 20 user, 3 year subscription 3: Cx- Codebashing, Name: Checkmarx Codebbing, 3-year support for annual support for the purchase, 3-year-year-year-year period, 3. Further details in the technical specifications and draft contract.

CPV codes

  • 48983000Development software packagemain

Conditions for participation & required documents

What the notice asks bidders to prove, and the documents it requires. Full text below.

Conditions in the notice

  • CertificatesCompany or personnel certificates named in the notice
  • ReferencesSimilar contracts delivered before
  • Key peopleNamed roles, CVs or minimum team

Detected automatically in the published notice. Always confirm against the tender documents.

Show the notice text (2)

Preliminary method of proof required in the tender, which is also necessary for the evaluation of tenders: pursuant to Section 67 (1) of the Kbt. (Public Procurement Act), the tenderer must submit in its tender its declaration contained in the ESPD. Pursuant to Section 2 (5) of the Kr.

(Government Decree 321/2015), the contracting authority stipulates that compliance with the minimum suitability criteria specified in the contract notice must be verified preliminarily by completing Section α (alpha): "Global indication for all selection criteria" in Part IV of the ESPD. The contracting authority does not require the provision of detailed information in Part IV of the standard form.

The contracting authority carries out the verification of compliance with the suitability requirements in two rounds, in accordance with the provisions of Section 69 of the Kbt.: in the first round, it verifies the declaration made in the ESPD, and in the second round, it verifies the certificates to be submitted pursuant to Section 69 (4) of the Kbt. In the case of joint tendering, each joint tenderer must submit a separate ESPD.

Method of verification required during evaluation (based on the contracting authority's request pursuant to Section 69 (4) of the Kbt.): REFERENCE: Suitability requirement: M1. The Tenderer is deemed unsuitable if it does not have at least 1 reference performed in accordance with the regulations and contractually during the 3 years (36 months) preceding the dispatch of the contract notice, concerning the supply of security source code analysis software or a security source code analysis system.

The contracting authority takes into account deliveries completed during the period under examination, but commenced within a maximum of six years (72 months). The date of completion of performance shall be the date of issuance of the certificate of performance. Method of verification: M.1.

The tenderer shall, pursuant to point a) of Section 21 (1) of the Kr., present its deliveries corresponding to the subject-matter of the public procurement performed in the 3 years (36 months) preceding the dispatch of the contract notice, certified in the form specified in Section 22 (1) of the Kr., i.e. by a declaration of the tenderer (or, where applicable, of another entity participating in proving suitability) or by a reference certificate issued by the other contracting party. The reference declaration or reference certificate shall contain at least the following information:

  • the name and address of the other contracting party;
  • the duration of performance, specifying the start and end dates with at least year-month accuracy (or year-month-day accuracy if necessary for examining the duration);
  • the subject-matter and quantity of the completed delivery, specified in such detail that compliance with the suitability requirement can be established [the specific delivered product must be indicated on the reference certificate/declaration; a general description (software) is not sufficient];
  • a declaration as to whether performance was carried out in accordance with regulations and the contract.If performance did not take place in accordance with the contract, the Tenderer must describe, pursuant to Section 22 (2) of the Kr., in the certificate or declaration the reason for and extent of the divergence, as well as, in the event of a breach of contract by the economic operator, whether the economic operator is liable for the breach of contract.If suitability is verified by a declaration of the tenderer, candidate, or other entity participating in verifying suitability, the declaration shall also indicate whether the other contracting party disputes the contractual nature of the performance or—if the economic operator has declared so—the circumstance that the economic operator is not liable for the breach of contract. The contracting authority is entitled to stipulate the provision of further data necessary to determine suitability among the…

PROFESSIONAL Condition: M2. The tenderer is unfit if he does not have at least 1 person in the Hungarian language involved in the performance, who has at least 3 years of professional experience (education and / or enlargement and / or development and / or installation) with regard to the recommended security source code analysis software or security source code analysis system.

Method of certification: According to § 21 (1) (b) Kr., compliance with the M2 eligibility requirement is described by the experts (organisations), in particular those responsible for quality control, their qualifications and qualifications, and their professional experience to be involved in the performance. § 67 (3) Kbt. on the basis of the information provided by the organisation providing its capacity, it shall demonstrate compliance with the relevant eligibility criteria in the same way as the required certification methods.

The applicant shall accept experience gained in the work of the professional in which at least one of the tasks listed in the competence requirement M.2. was assigned to him [specific products in use, at least 1, need to be marked in the CV, such as software, are not sufficient].

The applicant points out that the tasks, part of the tasks set out in the technical specifications, must be carried out by a professional presented in the field of competence, subject to the provisions of Article 138 (2) of the Kbt: i.e. the professional person may be amended, supplemented during the performance of the contract, but all professionals must comply with the requirements laid down as a condition of competence. Documents to be attached:

  • declaration of involvement, presentation of professionals [ECR form],
  • professional CV of the expert (s), self-signed, with a detailed description of the conditions required between the minimum requirements of competence on the basis of which the conditions are clearly established (in professional experience, time overlap is not permitted), [the qualification related to the existence of professional experience in the CV, the specific task to be carried out with the safety source analysis software or safety source analysis system at the workplace specified in the self-biography (e.g. software development) is not sufficient;
  • general designation (e.g. software development) is not sufficient, availability, and a declaration that it is required to include in the procedure. § 65 (6), (7), (9), (11) and (12) Kbt. also apply. According to § 67 (3) Kbt, the entity providing its capacity shall demonstrate compliance with the relevant eligibility criteria in the same way as the required certification methods.The applicant shall define the required M2eligibility requirement more strictly than the "Bronze 'classification of the Public Procurement Authority, given that the professional experience of the expert to be presented should be specifically relevant to the experience acquired by the safety source code analysis software or safety source code analysis system (education and / or expansion and / or development and / or installation).
EXAMPLE — not a result for your companyCan you bid? Your readiness check

This is how SalesDots checks this tender: the notice's conditions, this contract's own facts, the requirements typical for its category and your company's registers. The statuses below are an example; you see the real result after signing in.

5 met · 1 expiring · 0 missing · 3 to check

Conditions in this notice

  • Certificates named in the noticematched against the certificates in your profileIn your profile
  • Key peopleyour team matched to the required rolesIn your profile
  • Referencessimilar contracts from your history matched to the conditionIn your profile

This tender's facts

  • Price is the only criterionthe lowest valid bid wins — check your marginNeeds a look
  • Who wins at this buyerrecently: Wolters Kluwer Hungary Kft., EnterSoft Számítástechnikai Kft. — 5 different winners in the last 6 awardsNeeds a look

Typical for: Software licences & SaaS

  • Licence reseller authorisationpartner status with the software vendorIn your profile
  • Licence model and quantitiesnamed-user, device or subscription terms as in the noticeIn your profile
  • Data location and GDPREU hosting and a data processing agreement for cloud servicesNeeds a look
  • Vendor support and updatessupport level and update rights for the contract periodExpires before the deadline

Registers — checked automatically

  • National company registercompany active, representation matchesVerified
  • EU VAT (VIES)number active in VIESVerified
  • LEI (GLEIF)LEI issued and renewed, data matches the registerVerified
  • Sanctions screeningcompany and owners not listedVerified

Free · no account

Get tenders like this one by e-mail

New tenders like this one (Software licences & SaaS · Hungary), once a week and only when there are new ones.

Company address only. We do not accept Gmail, Outlook, WP or similar mailboxes.

Free check · 10 seconds

Does your company fit this tender?

Enter your tax number. We compare your public contract history with this tender — no account needed.

Company address only. We do not accept Gmail, Outlook, WP or similar mailboxes.

Award criteria

The full criteria and their weights, as published in the notice.

  • Price100%

    Összesített nettó ajánlati ár (HUF)

Buyer

Nemzeti Adó- és Vámhivatal

Address
Széchenyi Utca 2, 1054 Budapest, Hungary
Region (NUTS)
HU110

Register identifiers

Registration no. in the notice
15789934251

What this buyer bought before

41 IT contract award notices 2019–2026, €55.8m in total.

  • Elektronikus jogtár szolgáltatás 24 hónapra

    Winner: Wolters Kluwer Hungary Kft. · 1 bid

    HUF 155.8m

    26 Mar 2026

  • NCTS és egyéb vámszakmai rendszerek fejl. (NCTS 6)

    Winner: EnterSoft Számítástechnikai Kft. · 1 bid

    HUF 1.1bn

    19 Jan 2026

  • Nemzetközi üzleti adatbázisok angol nyelven

    Winner: Bureau van Dijk Editions Electroniques Sarl. · 1 bid

    HUF 1.8bn

    13 Jan 2026

  • VmWare licencek (előfizetés) beszerzése

    Winner: 99999 Informatika Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság +6 more contractors · 7 bids

    HUF 199.5m

    29 Sept 2025

  • Inf. eszközök és rendszerintegrációs szolg. II.

    Winner: Areus Infokommunikációs Zártkörűen Működő Részvénytársaság +3 more contractors · 4 bids

    HUF 1.4bn

    5 Sept 2025

  • VMware termékek gyártói támogatása

    Winner: 99999 Informatika Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság +2 more contractors · 3 bids

    HUF 856.7m

    20 May 2025

How to submit an offer

Offers are submitted only on the buyer's platform, before the deadline for offers.

Questions & answers

What is the deadline for offers in "Renewal of Checkmarx license integration implementation"?

Offers are due by 19 Nov 2026, 10:00 CET.

What is the estimated value?

The buyer did not publish an estimated value in the notice.

Who is the buyer?

Nemzeti Adó- és Vámhivatal (Budapest, Hungary).

Where and how do I submit an offer?

Offers are submitted electronically on https://ekr.gov.hu/eljarastar/eljaras/EKR001829772026.

How are offers scored?

price 100%.

Which procedure is used?

Open procedure.

Win it with SalesDots

Read the documents for you

SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.

Analyse documents

Match it with your profile

Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.

Check my fit

Prepare your response

Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.

Start a response

Never miss a change

Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.

Track this tender

Source: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform. Data from the official notice, refreshed 5 Nov 2026, 02:26 CET.