Engagement of a consultant to conduct Vulnerability Assessment and Penetration Testing (VAPT)
Petrotrade wants a consultant to run a vulnerability assessment and penetration test, based at NOCZIM House, Harare. Bids close 4 November 2026 at 10:00 CAT.
A consultant to conduct a vulnerability assessment and penetration test for Petrotrade, working from NOCZIM House, 100 Leopold Takawira Street. The engagement type is clear and the discipline is well understood, which is enough to know whether you can bid. What is absent is the scope, and on a VAPT the scope is the price: no count of IP addresses, hosts or applications, no statement of whether this covers external perimeter, internal network, web applications, wireless or social engineering, no indication of whether testing is black box or credentialed, and no mention of retesting after remediation. Petrotrade is a fuel retailer, so operational technology may or may not be in scope — the notice does not say, and that is a material question. The period is 14 days and quotes stay valid 30 days. The full tender document was not available to us; download it from the source for the scope before pricing.
Moderate effort to bid.
Written from the published notice — the full tender document was not available to us. Download it from the source before bidding: eligibility rules, fees and specifications may only appear there.
Read the official notice — GIST links to tenders at their publisher and never mirrors the documents.
Add the deadline to your calendar
Last checked against the publisher on 1 Nov 2026, 08:09.
The board is read from the publisher twice every working day. A tender plan tells you about a tender like this within minutes of publication, and reminds you before it closes.