Tenders Are Invited For Information Systems Or Technology Strategic Review Services – Software Audit And Pentest Of The Software Created As Part Of The Ladadi-Prodi Project

Information Systems Or Technology Strategic Review Services – Software Audit And Pentest Of The Software Created As Part Of The Ladadi-Prodi Project. The Subject Of The Tender Is The Independent Safety-Related Testing Of The Software Components Developed In The “Ladadi-Prodi” Project, Including The Associated Configurations And Test Environments Provided. The Order Includes In Particular: - A White Box Source Code Audit Of The Newly Developed Backend Components, - A White Box Source Code Audit Of The Mobile And Desktop Clients, - An Architecture And Configuration Review Of The Provided Container, Build And Kubernetes-Related Artifacts, - A Dependency And Supply Chain Audit Including Sbom-Based Analysis, - An Application-Related Penetration Test Of The Provided Test Environment, - The Structured Documentation And Prioritization Of All Identified Safety-Relevant Findings Including Technical Recommendations For Action. The Tender Does Not Cover General Software Development, Operation Of The Application Or A General Data Protection Compliance Check.