Vulnerability Scanning Solution
Solution de scan des vulnérabilités
France · LYON · how to bid here →
Your path to submission
- Deadline: 14 October at 11:00 — 11 days left.
- The submission point is stated in the notice (link on the right).
- Offer and evidence in: FRA.
- Collect your evidence — the eligibility requirements are listed above; for many of them the analysis explains how to obtain them.
Clement What the numbers say about this buyer
- In this sector the buyer awards roughly every 6 months (7 awards, most recently August 2026) — the next award is due around February 2027 by that rhythm. The last award went to DCS Easyware.n = 7
- 6% of this buyer's awards went to companies that had already won here before (228 awards since 2019, spread over 113 companies). That is well below the sector norm (20%) — this buyer switches suppliers more often than others.n = 228 awards since 2019
- The median procedure drew 4 bids (119 procedures with a bid count); 3% ended with a single bidder. Sector: median 5 bids.n = 119
- 14% of awards went to companies from abroad (228 awards with a known winner country). Sector average: 7%.n = 228
- 0% of the bids received came from other countries (15 procedures with a bid mix) — all bidders, not just the winners. Sector: 6%.n = 15
From this buyer's documented awards; comparison values from the same sector and country. Not a forecast, not legal advice. As of 27/09/2026.
Foreign bidders
In France · IT services, 224 contracts went to foreign companies over the last 3 years (of 4,597 recorded awards) — mostly from Germany, Spain, Belgium.
Submission language: FRA.
Typical field: median 3 (from 6 awards).
What the buyer is looking for
This contract is a single-awarded framework agreement for the purchase of an OnPremise vulnerability scanning solution covering the entire SNCF IS. This solution aims to identify security vulnerabilities, prioritize their remediation and ensure permanent visibility of the level of security of the IS, in a proactive approach to reduce cyber risk. Firm perimeter: Covers 20,000 servers and hypervisors, 260,000 Docker images scanned from a private Harbor registry (including 1,000 new images per day), and 100 Firewall-like security equipment. Optional perimeter: 40,000 network devices (Reverse-Proxies, Load-Balancers, routers, switches) as well as 300 Kubernetes clusters (Azure AKS, AWS EKS, Talos, RKE2), representing approximately 2,500 VMs. PES Optional: External scan covering at least 50,000 assets exposed on the Internet The contract covers the provision of software licenses and…
Show full description
… associated support, as well as support for integration into the SNCF environment (deployment, parameterization, customization of the interface, interconnections with existing bricks, flow openings).
Selection criteria — in the procurement documents
The buyer states in the notice that the selection criteria are in the procurement documents (link on the right), not in the EU form. The document analysis below extracts them from there — bid and evidence in French.
Contract
Who has won here before
| Company | Awards | Period |
|---|---|---|
| WEESURE PROTECTION | 3 | 2025–2026 |
| ESP SECURITE | 3 | 2025–2026 |
| SOLIDARITE ACCUEIL | 2 | 2025 |
| BERTHOLD | 2 | 2024 |
| SOGEA ILE DE FRANCE SAS | 2 | 2024 |
How often this buyer tenders this
Who knows the rhythm prepares instead of reacting.
How to bid
Guide: how to apply on PLACE — Plateforme des achats de l'État (Frankreich) → Registration, signature, fees — from the operator's bidder manual.