Tenders Are Invited For Business Services: Law, Marketing, Consulting, Recruitment, Printing And Security - Procurement Of Security Testing Of Applications And Services

Business Services: Law, Marketing, Consulting, Recruitment, Printing And Security - Procurement Of Security Testing Of Applications And Services. Through The Subject Of Procurement, The Client Wants To Strengthen The Security Of All Applications And Systems That Are In Production, Which Will Either Be Developed Or Upgraded Through Projects Implemented By The Client, With The Aim Of Improving The Security Of The Applications Themselves, The Entire Ecosystem, The Security Of The Data That These Systems Have, But Also The End User Of Each System. The Purpose Of Security (Penetration) Testing Is To Examine And Verify Data Management Mechanisms, As Well As The Entire Software Architecture, As Well As Software Packages That Are Part Of A Complete Solution In Order To Find Vulnerabilities That Need To Be Fixed Before An Individual Application Or System Is Released Into The Production Environment. The Purpose Of Security Support For The Dns Infrastructure Is To Improve The Security Of The Dns Infrastructure. The Subject Of This Procurement Procedure Is The Service Of Implementing Security Testing Of Applications And Services And Security Support For The Clients Dns Infrastructure, Which Includes: • Penetration Test: O Web Applications, O Web Services, O Mobile Applications, O Client-Server Applications, O The Infrastructure Part Of The Information System Exposed To The Internet, Testing The Systems Resistance To Dos And Ddos Attacks, And Advising The Client. • Security Support For Dns Infrastructure O Development And Upgrading Of Tools For Automatic Detection Of Misuse Of .Hr Domains O Red Team Exercise O Modeling Of Threats According To Components Of Dns Infrastructure • Production Of Related Reports. Procurement Includes: • Web Application Penetration Test, Web Service Penetration Test, Mobile Application Penetration Test, Client-Server Application Penetration Test, Penetration Test Of The Infrastructure Part Of The Information System Exposed To The Internet, Testing Of System Resistance To Dos And Ddos Attacks • Providing Security Support For Dns Infrastructure, Which Includes The Development And Upgrading Of Tools For Automatic Detection Of Abuse Of The .Hr Domain, Conducting Red Team Exercises And Modeling Threats To Dns Infrastructure Components • Preparation Of Related Reports And Advisory Services In The Field Of Computer Security And Security Testing For The Needs Of The Client. A Detailed Description Of The Procurement Item Is Given In Annex 2 - Technical Specification.