When is the submission deadline?

This RFP closed on July 21, 2026 and is no longer accepting submissions.

It was issued by Tiko. The work is located in Kenya; South Africa; Uganda.

Who is a good fit for this opportunity?

Cybersecurity consultancy specializing in penetration testing and vulnerability assessment. Experience testing Android mobile applications, web applications, and APIs. Capability to assess backend services, databases, and server infrastructure. Familiarity with secure testing in staging environments for government or regulated clients. Team with recognized security certifications such as OSCP, CREST, or equivalent. Prior experience delivering formal penetration testing reports and remediation guidance.

RFP HunterNever miss another opportunity you should have won.

Book a demo

See More RFPs

Platform Penetration Testing Consultancy Service

Book a demo

Overview

Cybersecurity & Data Privacy

Kenya; South Africa; Uganda; Ethiopia; Burkina FasoPosted: July 9th, 2026Deadline: July 21st, 2026

Past Due

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A South African government authority requires penetration testing consultancy services for an Android application, web-based configuration interface, APIs, and supporting backend infrastructure. The work excludes physical security and social engineering assessments and will be conducted in staging environments.

KEY REQUIREMENTS

Must be a recognized company
Must have experience in penetration testing
Must provide at least three relevant and contactable client references from the past 36 months
Must align testing methodologies with OWASP standards
Must provide a comprehensive vulnerability assessment report
Must provide post-engagement support for findings and remediation
Must provide retesting of critical and high-severity vulnerabilities
Must submit proposal not exceeding 15 pages excluding annexures

TIMELINE

Questions due by July 13th, 2026.

Responses to questions by July 16th, 2026.

Proposals due by July 21st, 2026.

QUESTION DEADLINE

July 13th, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Tiko

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

A government authority in South Africa is seeking a consultancy to provide platform penetration testing services. The engagement covers security testing of an Android mobile application and its associated APIs, as well as a web-based configuration interface and its respective APIs.

The scope also includes evaluation of backend services, databases, and server infrastructure. Physical security assessments and social engineering attacks are explicitly excluded from the assignment. Testing is to be performed in staging environments in order to minimize any impact on production systems.

Similar RFPs

Frequently asked questions

When is the submission deadline?: This RFP closed on July 21, 2026 and is no longer accepting submissions.
Who issued this RFP?: It was issued by Tiko. The work is located in Kenya; South Africa; Uganda.
Who is a good fit for this opportunity?: Cybersecurity consultancy specializing in penetration testing and vulnerability assessment
Experience testing Android mobile applications, web applications, and APIs
Capability to assess backend services, databases, and server infrastructure
Familiarity with secure testing in staging environments for government or regulated clients
Team with recognized security certifications such as OSCP, CREST, or equivalent
Prior experience delivering formal penetration testing reports and remediation guidance

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works