How to bid in this country: portals, deadlines, thresholds →
Call for tenders for security testing
Turvatestimise hange — original title
Your path to submission
- Deadline: 4 December at 12:00 — 33 days left.
- You submit on Riigihangete register — not here and not by e-mail. ↗
- Offer and evidence in: Estonian.
- Collect your evidence — the eligibility requirements are listed on this page; for many of them the analysis explains how to obtain them.
What the buyer is looking for
Find contractors for security testing of the contracting authority's e-services, information systems and network infrastructure and for the provision of related support services. Services include application, API and infrastructure penetration testing, cloud security and source code assessment, attack simulations (including phishing and Red Teaming), creation of sandboxes, and expert engagement. / Grounds for exclusion and selection criteria: See the tender specifications
Contract
Type of service
Clement What the numbers say about this buyer
- In this sector the buyer awards roughly every 2 months (43 awards, most recently September 2026) — the next award is due around November 2026 by that rhythm. The last award went to OSAÜHING INVERSION SOFTWARE.n = 43
- 18% of this buyer's awards went to companies that had already won here before (90 awards since 2018, spread over 30 companies). That is well below the sector norm (43%) — this buyer switches suppliers more often than others.n = 90 awards since 2018
- The median procedure drew 3 bids (88 procedures with a bid count); 31% ended with a single bidder. Sector: median 6 bids.n = 88
- 9% of awards went to companies from abroad (90 awards with a known winner country). Sector average: 22%.n = 90
- 9% of the bids received came from other countries (46 procedures with a bid mix) — all bidders, not just the winners. Sector: 17%.n = 46
From this buyer's documented awards; comparison values from the same sector and country. Not a forecast, not legal advice. As of 01/11/2026.
Selection criteria — via the ESPD
The buyer states in the notice that eligibility is proven through the European Single Procurement Document (ESPD); the concrete requirements are in the tender documents. The document analysis below extracts them from there — bid and evidence in Estonian.
Tender documents — direct download
Who has won at this buyer so far
Across all contract types of this buyer — not just this sector. A city buys software and fire engines through the same purchasing office.
| Company | Awards | Period |
|---|---|---|
| Aktsiaselts Datel | 4 | 2024–2025 |
| Wisercat Estonia OÜ | 4 | 2024 |
| OSAÜHING INVERSION SOFTWARE | 3 | 2024–2026 |
| Krabu Grupp OÜ | 2 | 2024–2025 |
| Trinidad Wiseman OÜ | 2 | 2025–2026 |
How often this buyer tenders this kind of work
Tactics
When this buyer has awarded in this sector, usually 5 or more bids came in. Many compete here — price and references decide. (Based on 43 completed awards — not a statement about this procedure.)
This procedure allows 60 days between publication and deadline — typical in this country is 31 (median of 717 procedures). Much more generous than usual — time for a thorough bid rather than a quick one.
Foreign bidders
In Estonia · IT services, 106 contracts went to foreign companies over the last 3 years (of 1,231 recorded awards) — mostly from Finland, Germany, Belgium.
Submission language: Estonian.
How to bid
Don't miss the next one
Friedrich finds tenders like this for you — every morning at 7:30, each one checked by Claude (Anthropic) for fit, and he learns from your feedback what your company really does.
Register now