Vulnerability scan solution

This contract is a single-attribute framework agreement for the purchase of an OnPremise vulnerability scan solution covering the entire SNCF SI. The aim of this solution is to identify security gaps, prioritize rectification and ensure permanent visibility of the IS security level, in a proactive approach to reducing cyber risk. Firm Perimeter: covers 20,000 servers and hypervisors, 260,000 Docker images scanned from a Harbor private registry (including 1,000 new images per day), and 100 Firewall security equipment. Optional Perimeter: 40,000 network equipment (Reverse-Proxies, Load-Balancers, routers, switches) as well as 300 Kubernetes clusters (Azure AKS, AWS EKS, Talos, RKE2), representing approximately 2,500 VM. PES Optional: external scanning of at least 50,000 assets exposed on the Internet The market focuses on the provision of software licenses and associated support, as well as support for integration into the SNCF environment (deployment, parameterization, interface customization, interconnections with existing bricks, flow openings).