Procurement Summary
Country: Afghanistan
Summary: Web application vulnerability scanning
Deadline: 01 Feb 2018
Posting Date: 20 Feb 2018
Other Information
Notice Type: Tender
TOT Ref.No.: 20069642
Document Ref. No.: EOITP14681
Competition: ICB
Financier: United Nations Secretariat
Purchaser Ownership: -
Tender Value: Refer Document
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
Web Application Vulnerability Scanning
Deadline: 01-Feb-2018 00:00
Time zone: (GMT 0.00) Western Europe Time, London, Lisbon, Casablanca
Description:
The United Nations Joint Staff Pension Fund is seeking expressions of interest from providers of web application vulnerability scanning tools to identify potential security vulnerabilities and architectural weaknesses in web applications. The ideal tool will communicate with a web application through the web front-end and automatically crawl the web application and test it for common security problems such as Cross-Site Scripting, SQL Injection, Directory Traversal, insecure configurations, and remote command execution vulnerabilities. Essential features: - Availability of on premise deployment option - Unlimited number of scan targets (IP addresses or URLs) - Ability to connect through an API - Availability of compliance reporting and dashboard features - Wide coverage of various types of vulnerabilities including OWASP top 10 vulnerabilities (e.g. SQLi, XSS, XE, CSRF, SSRF, etc.) - Ability to detect vulnerabilities in popular CMS such as WordPress, Joomla! and Drupal - Support of various input Vectors (GET/POST/XML/JSON) - Support for overcoming modern scan barriers, including support for: o Recording login sequences o Detect logout (In-Session) o Custom Authentication Header o Support Multiple Domains (SPA) o Detect/Configure AntiCSRF Params and Headers o Depp crawling including HTML5 and AngularJS o Support of different authentication methods ( Http/Cookie and NTLM v1/v2) - Providing remediation advice - High accuracy and low percentage of false positives - Availability of support, maintenance and updates - Ease of use Responses to this EOI are invited by the deadline noted above for the purposes of market research and the formation of a sourcing list for possible solicitations on subject-matter requirements. NOTE: Submissions via the electronic online system are preferred. Respondents to the EOI will be separately informed of any possible solicitations to which they are eligible/
UNSPSC:
G - Business, Communication & Technology Equipment & Supplies
43000000 - Information Technology Broadcasting and Telecommunications
43230000 - Software
J - Services
81000000 - Engineering and Research and Technology Based Services
There have been no revisions to this notice.
NOTE: Multiple Countries (Total: 46)
Type of notice :Request for EOI
More Details :G - Business, Communication & Technology Equipment & Supplies
43000000 - Information Technology Broadcasting and Telecommunications
43230000 - Software
J - Services
81000000 - Engineering and Research and Technology Based Services
Documents
Tender Notice