Provision of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) Tool
Kenya Trade Network Agency (KenTrade) seeks a vendor to supply, install and support an integrated SAST and DAST application security testing platform for the Kenya National Single Window. Tender security KSh 120,000. Closes 22 April 2026 at 10:00 EAT.
Official Title
Overview
The Kenya Trade Network Agency (KenTrade), the state agency operating the Kenya National Electronic Single Window System (KenTradeNet) under the National Treasury, has issued an open national tender for the supply, delivery, installation, configuration and ongoing support of an integrated SAST and DAST toolset. The platform will be used by KenTrade application security and DevSecOps teams to scan source code, container images and running web applications across the Single Window environment, which handles trade documentation for thousands of importers, exporters, customs agents and government partners across Kenya. Bidders should expect to integrate with KenTrade existing CI/CD pipelines and security operations workflows. Prices in Kenya Shillings, valid 175 days. Electronic submissions are NOT permitted.
Scope of Work
Supply, installation and commissioning of a SAST tool covering languages used in KenTrade application stack. Supply, installation and commissioning of a DAST tool for authenticated/unauthenticated web app and API scanning. Integration with KenTrade source code repositories and CI/CD pipelines. Training and knowledge transfer to KenTrade ICT and security teams. Multi-year technical support, maintenance and software updates. Documentation and SOPs.
Requirements & Qualifications
Legally registered firm able to invoice in Kenya. Tender security KSh 120,000 valid 150 days from closing, in form of bank guarantee or PPRA-listed insurance company guarantee. Pre-registration with KenTrade by emailing procurement@kentrade.go.ke with full company details. Chronological serialisation of all tender pages. Demonstrated experience supplying SAST/DAST tools to government, financial services or trade-facilitation environments expected.
Evaluation Criteria
Mandatory compliance check (security, registration, serialisation, completeness). Technical evaluation against tender document specifications: language coverage, scan accuracy, integration capabilities, support model, vendor track record. Financial evaluation of total cost of ownership. Award to lowest evaluated responsive bidder.