Skip to content
Aperlena

TED - Tenders Electronic Daily (Publications Office of the EU) verified 9 hours ago Contract notice

France - IT services, consulting, software development, internet and support - Vulnerability scanning solution

Original France - Services de technologies de l'information, conseil, développement de logiciels, internet et appui - Solution de scan des vulnérabilités

Open France IT services

Buyer Société nationale SNCF

3 days to request

Key facts

Requests to participate by
11:00 (UTC+2)
Procedure
Negotiated procedure
  1. Published
  2. Today
  3. Deadline open for 21 days
  4. Awarded pending

Bidding window

21 days from publication to deadline

Shorter than usual

Notices of this kind (France, negotiated procedure, above the EU threshold) give a median of 29 days, half of them between 24 and 34 days, based on 1,638 notices of the last two years. Fewer days than three in four comparable notices. Check the documents early and ask questions before the clarification deadline.

View the official notice Watch this tender

If the deadline moves or the notice is corrected, we email you. Log in

Summary

Machine-generated summary

SNCF is procuring a single-provider framework agreement for an OnPremise vulnerability scanning solution covering its entire information system. The aim is to identify security flaws, prioritise remediation and provide continuous visibility of the security level in a proactive cyber risk reduction approach. The firm scope covers 20,000 servers and hypervisors, 260,000 Docker images scanned from a private Harbor registry (1,000 new images daily) and 100 security devices such as firewalls. The optional scope adds 40,000 network devices (reverse proxies, load balancers, routers, switches) and 300 Kubernetes clusters (Azure AKS, AWS EKS, Talos, RKE2), about 2,500 VMs. An optional specific service covers external scanning of at least 50,000 Internet-exposed assets. The contract includes software licences, support and integration assistance covering deployment, configuration, interface customisation, interconnections with existing components and flow openings.

Description

Le présent marché est un accord-cadre mono attributaire pour l'achat d'une solution OnPremise de scan des vulnérabilités couvrant l'ensemble du SI SNCF. Cette solution a pour objectif d'identifier les failles de sécurité, d'en prioriser la remédiation et d'assurer une visibilité permanente du niveau de sécurité du SI, dans une démarche proactive de réduction du risque cyber. Périmètre ferme : couvre 20 000 serveurs et hyperviseurs, 260 000 images Docker scannées depuis une registry privée Harbor (dont 1 000 nouvelles images par jour), et 100 équipements de sécurité de type Firewall. Périmètre optionnel : 40 000 équipements réseau (Reverse-Proxies, Load-Balancers, routeurs, switchs) ainsi que 300 clusters Kubernetes (Azure AKS, AWS EKS, Talos, RKE2), représentant environ 2 500 VM. PSE Facultative : scan externe portant sur au moins 50 000 actifs exposés sur Internet Le marché porte sur la fourniture des licences logicielles et du support associé, ainsi que sur l'accompagnement à l'intégration dans l'environnement SNCF (déploiement, paramétrage, personnalisation de l'interface, interconnexions avec les briques existantes, ouvertures de flux).

Terms of the procedure

As the official notice states them.

Bid or no-bid?

Six questions before you commit a team. Under each one, what the register holds on it. The answers are yours.

  1. Check this first:

    Do we meet every eligibility criterion?

    Negotiated procedure: the buyer negotiates the terms with the suppliers it admits.

    Above the EU threshold: open to companies from any EU country.

  2. Your call:

    Can we deliver this with the team we have?

    The register holds nothing on this. The official documents will.

  3. Your call:

    Do we have two comparable references?

    Comparable work is in IT services.

  4. Check this first:

    Is the deadline realistic for a proper offer?

    3 days left.

  5. Your call:

    Is there a margin at the likely winning price?

    In this country this kind of contract is usually awarded for between €68,435 and €516,247.

  6. Your call:

    Do we know this buyer?

    The buyer has 119 notices in the register and no pattern of winners yet.

Can I bid?

  • Negotiated procedure: the buyer negotiates the terms with the suppliers it admits. Above the EU threshold: open to companies from any EU country.
  • The notice is written in French.
  • Certificates from another EU country? Check the equivalents on eCertis

Official source

Source: TED - Tenders Electronic Daily (Publications Office of the EU)

Always verify details on the official notice.

Report an error in this notice

Last verified against TED - Tenders Electronic Daily (Publications Office of the EU) 9 hours ago

What this market pays

The buyer has too few awards of its own in this sector, so this is the range of the last 1,115 awards for IT services in France.

Median award
€174,684
Middle half of past awards
€68,435 to €516,247

TED - Tenders Electronic Daily (Publications Office of the EU) publishes no value for this notice, so it has no mark on the scale. The official documents may state one.

Award values as published by the official sources. Use them as a guide, not a rule: scope, lots and duration differ between contracts.

Société nationale SNCF

France

notices in the register
119
awards
15
awarded in total
€7.3M

Who wins its contracts

Many suppliers
different companies won its awards
12
of the awards went to the three most frequent winners
31%

Based on 13 awards with a named winner over the last 3 years. Counted by award, not by value, because lot and framework amounts are not comparable. Concentrated means the three most frequent winners took 65% or more of the awards; many suppliers, under 35% with at least ten different winners.

Competition

of the awards went to companies based in another country
0%

As the official award notices state them, over the last 3 years. Tenders per lot count open and restricted procedures only: in a negotiated procedure or a direct award a single tender is the procedure itself. The country is the one the notice gives for the winner.

One dot per award, on the day it was signed, sized by its value. A ring is an award with no published value.

Who usually wins this buyer's contracts in this sector

Company Wins Total awarded Last win
AKKODIS DIGITAL 1 Oct 2025
DCS EASYWARE 1 Aug 2026

Based on 2 awards with a linked company profile over the last 5 years.

23 open tenders right now

Market context

TED - Tenders Electronic Daily (Publications Office of the EU) publishes no value for this notice, so it cannot be placed among the open notices of its sector. The official documents may state one.

open now in IT services
3,263
median open notice
€510,744

Who wins in this market

Many suppliers

France · IT services

different companies won awards here
1,512
of the awards went to the three most frequent winners
2%
winners of the last 12 months were new here
1,156 of 1,246
buyers awarded contracts here
999

Based on 1,989 awards with a named winner over the last 3 years. Counted by award, not by value, because lot and framework amounts are not comparable. Concentrated means the three most frequent winners took 65% or more of the awards; many suppliers, under 35% with at least ten different winners. New: no award from the same buyer or market in the two years before.

Competition

tenders per lot on average (open and restricted procedures)
4.6
of those lots received a single tender
16%
of the awards went to companies based in another country
1%
of the tenders came from another country
7%

As the official award notices state them, over the last 3 years. Tenders per lot count open and restricted procedures only: in a negotiated procedure or a direct award a single tender is the procedure itself. The country is the one the notice gives for the winner.

Similar tenders

Open now

Awarded before

Never miss a tender like this

71 new notices in IT services in France in the last 7 days. Get an email when new ones appear. Free.

Set up my alert

Or follow just its CPV code, IT services: consulting, software development, Internet and support: an email when new tenders arrive under it, no account needed.

3 days to request

Open notice

Keyboard shortcuts

Read a list without reaching for the mouse. The shortcuts stay quiet while you type in a field.

j
Next result
k
Previous result
Enter
Open the result
n
Next page
p
Previous page
c
Compare this result
s
Shortlist this result
o
Open the result in a new tab
x
Set this result aside
/
Search from any page
Ctrl K
Search from any page
?
Show these shortcuts
Esc
Close

Index

Close
Log in

Language