Friedrich & ClementBETA

How to bid in this country: portals, deadlines, thresholds →

Information security investigations (RVICTO-PT) 2026-II

Informatiebeveiligingsonderzoeken (RVICTO-PT) 2026-II — original title

NLNetherlands · Den Haag

Your path to submission

  1. Deadline: 18 January 2027 at 14:00 — 78 days left.
  2. You submit on TenderNed — not here and not by e-mail. ↗ Submission via TenderNed with an eHerkenning account — issuance for foreign firms can take time; apply early. Sort out account and signature first — not on submission day.
  3. Offer and evidence in: Dutch.
  4. Collect your evidence — use the eligibility analysis on this page: it lists the requirements and, for known certificates, how to get them.
Compiled automatically from notice and documents — no guarantee; the procedure's wording is binding.

What the buyer is looking for

This call for tenders concerns the conclusion of a framework contract for the conduct of information security investigations (penetration tests). The aim is to identify digital vulnerabilities in systems, applications and other objects in order to remedy or mitigate them. The penetration tests are carried out using automated and manual methods and stem from the duty of care that participants have under the NIS2 Directive and the Cybersecurity Act based thereon. This framework contract is intended for several national participants, including various ministries and central government bodies. For the complete list of participants per ministry and organisation, we refer to Section 1.1.1 of the Tender Document. Estimated value € 20.000.000,00 maximum value € 35.000.000,00. Both amounts excluding VAT. · Penetration tests, see Tender document for the contract description with scope. Estimated value € 20.000.000,000.00, maximum value € 35.000.000,00. Both amounts excluding VAT.

Machine translation (EU eTranslation) — official wording via the PDF link.

Contract

TypeServices
Estimated valuevalue not published
Published30 Oct 2026
ProcedureOpen procedure
Framework agreement

Type of service

71 · Architecture & engineering72 · IT services73 · R&D services
CPV 71600000 · 72220000 · 72254000 · 72800000 · 73430000

Clement What the numbers say about this buyer

  • In this sector the buyer awards roughly every 2 months (20 awards, most recently February 2025) — by that rhythm the next award was due around March 2025. The last award went to Crux Engineering B.V.n = 20
  • The award came in at a median 52% of the estimated value (14 awards with both estimate and value) — pricing at the estimate is usually too high here. Sector: 90%.n = 14
  • The median procedure drew 3 bids (307 procedures with a bid count); 16% ended with a single bidder. Sector: median 5 bids.n = 307
  • 24% of awards went to companies from abroad (329 awards with a known winner country). Sector average: 8%.n = 329
  • 4% of this buyer's awards went to companies that had already won here before (329 awards since 2018, spread over 101 companies). 96% went to new names.n = 329 awards since 2018

From this buyer's documented awards; comparison values from the same sector and country. Not a forecast, not legal advice. As of 01/11/2026.

Clement
References and certificates from your home country count fully across the EU — that is what European procurement law is for.

Selection criteria — in the procurement documents

The buyer states in the notice that the selection criteria are in the procurement documents (link on this page), not in the EU form. The document analysis below extracts them from there — bid and evidence in Dutch.

Eligibility analysis from the tender documents

Tender documents — direct download

⤓
Annex 1
Specifications and annexes at the buyer — usually viewable without registration
⤓
Administrative conditions
The full notice, official wording

Who has won at this buyer so far

Across all contract types of this buyer — not just this sector. A city buys software and fire engines through the same purchasing office.

CompanyAwardsPeriod
Resilience B.V.42024
ICI Business22022–2024
Fair & Sustainable Consulting22024
Geoserve B.V.22024–2025
PROJECT FOR INNOVATION CONSULTING22024–2026
From the recorded awards · regular winners know this buyer's requirements — that is your competition.

How often this buyer tenders this kind of work

40
2024
2
2025
8
2026
50 procedures in this category since 2019. Public procurement repeats itself — those who know the rhythm prepare instead of reacting.

Contracting authority contact

Websitewww.rvo.nl
·
Deadline — Monday, 18 January 2027 at 14:00

Tactics

When this buyer has awarded in this sector, usually about 4 bids came in. A normal field for this market. (Based on 20 completed awards — not a statement about this procedure.)

This procedure allows 81 days between publication and deadline — typical in this country is 48 (median of 2,911 procedures). Much more generous than usual — time for a thorough bid rather than a quick one.

The deadline falls on a Monday — your last full working day is the Friday before. Have evidence and guarantees together by Thursday.

Foreign bidders

In the Netherlands · Architecture & engineering, 129 contracts went to foreign companies over the last 3 years (of 2,699 recorded awards) — mostly from Germany, France, United Kingdom.

Submission language: Dutch.

Measured from linked award data; foreign winners bidding through a local subsidiary count as domestic — the true share is higher.

How to bid

Read the full notice — Original + documents
Goes directly to this tender on TED — Tenders Electronic Daily. The full specification and all annexes are there.
This procedure is published on 2 portals
Bids are submitted on TenderNed — TED carries the same notice, usually with the more detailed specification. Read both.
TEDNoticeTenderNedSubmission portal
Put together the evidence — in Dutch
Certificates, references and your price — as set out in the notice.
Submit via TED — Tenders Electronic Daily before the deadline
Electronic submission — allow time for the portal registration the first time.
To the procurement portal →Official notice on TED →
We pull data from millions of notices. If the link here does not work, report it — we will find the right one.

Don't miss the next one

Friedrich finds tenders like this for you — every morning at 7:30, each one checked by Claude (Anthropic) for fit, and he learns from your feedback what your company really does.

Register now