Procurement Summary
Country: Norway
Summary: The Prettiest of Applications
Deadline: 21 Aug 2026
Posting Date: 20 Aug 2026
Other Information
Notice Type: Tender
TOT Ref.No.: 147613837
Document Ref. No.: 2026-113232
Competition: ICB
Financier: Self Financed
Purchaser Ownership: Public
Tender Value: Refer Document
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
The prettiest of applications Purpose The purpose of the assignment is to uncover vulnerabilities in three of ElBits' web applications and give us a prioritized overview of concrete measures we can implement. The result must also be able to be used as documentation of completion security testing in our information security management system. Scope The test includes the applications Tilko, Nemo-api and Nettmodell-hub, with associated user interfaces, APIs, authentication against our ID service and authorization model across user roles. Denial of service attacks, physical security, social manipulation and the underlying Azure platform fall outside the scope. Method We base a gray box approach, where the supplier receives test users and documentation, but is open to others proposal. The proposed methodology is described by the supplier in the offer and is included in the evaluation. Supplier requirements The supplier describes relevant experience, references and the competence of the testers offered. Implementation The supplier proposes a practical plan for implementation and notification along the way. Deliverables Report with summary for management and technical part, where each finding is described with a risk assessment and recommended measures, as well as a prioritized list of measures. We also want a simple review of findings with development team. Offer Price per application and total, estimated number of test hours, named testers, proposed methodology and schedule.
Documents
Tender Notice