Search

  • Search


    DAST solution (Dynamic Application Security Testing)

    Veikkaus Oy

    DAST solution (Dynamic Application Security Testing)

    1. Competition notice published

      May 21, 8:05 AMMay 21, 2026 8:05 AM
    2. Questions deadline

      Jun 12, 7:00 AMJune 12, 2026 7:00 AM
    3. Tender submission deadline

      Jun 29, 9:00 AMJune 29, 2026 9:00 AM
    4. Opening date

      Jun 29, 9:05 AMJune 29, 2026 9:05 AM
    5. Tender validity period

      Dec 29, 10:00 AMDecember 29, 2026 10:00 AM

    Brief

    Finland: Tenders/Veikkaus Oy/DAST solution (Dynamic Application Security Testing)

    Expired

    The competition has expired without a winner being announced.

    Brief

    IT-sikkerhet

    Veikkaus Oy needs a Dynamic Application Security Testing (DAST) solution to enhance secure software development capabilities. This service involves dynamic security testing of applications, periodic and on-demand scanning, integration and automation, and findings management and reporting. The solution will primarily operate against Veikkaus’ test and pre-production environments, with potential extension to production environments. The award criteria is 100% Price.

    About the bid

      Veikkaus is about to purchase a DAST solution (Dynamic Application Security Testing) for increasing secure software development capabilities. The DAST solution to be procured is a dynamic application security testing platform that identifies security weaknesses by interacting with running applications over HTTP/HTTPS and other supported protocols. The solution is expected to operate primarily against Veikkaus’ test and pre production environments, with the possibility to extend to production environments where appropriate and safe. At a high level, the DAST service must provide: 1) Dynamic security testing of applications 2) Periodic and on demand scanning 3) Integration and automation 4) Findings management and reporting. This RFP alongside its attachments describes the subject of the procurement.Main features of the procedure1. GENERAL The legislation concerning the public procurement is applied to the procurement. Type of procedure is open procedure. 2. CONTRACT NOTICE A contract notice has been published on the website www.hankintailmoitukset.fi and http://ted.europa.eu. The contract award notice shall be published after the award decision. 3. SUBMITTING THE TENDER AS A GROUP OF ECONOMIC OPERATORS AND SUBCONTRACTING A tender may be submitted by a group of economic operators (a consortium or group). If awarded the contract, all group members must sign the contract and will be jointly liable for its performance. The composition of the group may not change during the procurement process or the contract period. The group, as well as a supplier with subcontractors, must possess the necessary technical, economic, financial, and other capacities to deliver the goods and services in accordance with the contract for its entire duration. During the tender process and throughout the contract period, the contracting authority may request proof of commitments and agreements with declared subcontractors that could impact the supplier’s ability to fulfill the contract obligations. Similarly, the group may be required to provide evidence of the arrangements governing relationships among its members. If a tenderer engages subcontractors, it remains fully responsible for their work as if it were its own. A tenderer submitting an independent bid while relying on subcontractors must specify in the Subcontractors Form how each subcontractor contributes to service delivery. During the contract period, subcontractors may only be replaced with the contracting authority’s approval, provided such changes do not lead to significant or material modifications of the contract. 4. USING RESOURCES OF OTHER ENTITIES A tenderer or a group of economic operators may rely on the resources of other entities to meet the requirements of the invitation to tender, regardless of the legal nature of their relationship. However, these resources must be available to the tenderer or group throughout the procurement process and the contract period. Such resources may include, for example: Professional experience – Relying on the expertise of another economic entity, such as a company within the same corporate group, provided that the entity is named in the tender as a subcontractor and actively participates in delivering the service. Personnel – Using employees from another company to meet professional qualification requirements, provided that these individuals actively contribute to service delivery. Economic and financial standing – Leveraging the financial capacity of another entity. Technical capabilities – Utilizing another entity’s technical resources, provided they are genuinely used to meet the procurement requirements. In these instances, the entity being relied on must be appropriately indicated the subcontractors annex. 5. PROCESSING OF TENDERS 5.1 SUITABILITY OF TENDERS Before the tenders are processed it shall be assessed whether the tenderers meet the technical, professional and economic and financial requirements presented in clause/form "Exclusion and suitability (ESPD)". The tenderer’s suitability shall be examined using the information provided in the tender, other financial statements (if separately requested) and the information available from risk rating reports. Tenderers who do not meet the minimum requirements set in the Call for Tenders shall be excluded from the tender competition. A tenderer who has been convicted of or in which any person with powers of representation, decision making or control has been convicted of an offence as referred in EU Public Procurement Directive 57 article, section 1 or to extortionate work discrimination as stated in the Criminal Code of Finland, chapter 47 section 3(a) shall also be excluded from the tender competition. A tenderer to whom a criterion for exclusion as referred to in Public Procurement Act may also be excluded from the tender competition. 5.2 COMPLIANCE WITH THE CALL FOR TENDERS The goods and services offered must fully comply with the requirements outlined in the Call for Tenders and its annexes. All requested information and required annexes must be submitted as part of the tender. Compliance will be assessed based on the tender’s overall content. Tenders that do not meet the requirements of the Call for Tenders or fail to adhere to the conditions of the tendering procedure will be disqualified from the competition. 5.3 EVALUATION OF TENDERS The evaluation of the tenders shall be made according to chapter "Grounds for decision". 5.4 AWARD DECISION AND ITS NOTIFICATION The award decision shall be sent to all tenderers party to the decision via email. The contract does not enter into force as a result of the notification of the decision, but requires a separate written contract.

      Contact name
      Veikkaus Oy
      Contact phone
      +358 20055000
      Contact email
      hankinnat@veikkaus.fi
      Address
      PL 1, 01009 Veikkaus

    Custom Assessment Criteria

    Start a free trial to ask your own questions about the tender and get AI-generated answers.

    Award Criteria

    • Description

      Total price

    Qualification requirements

      Found no qualification requirements in the contract notice.

    Previous Contract Winners

    Start a free trial to see who has won similar tenders for this buyer.

    See the full notice

    Contracting authority
    Veikkaus Oy
    Title
    DAST solution (Dynamic Application Security Testing)
    Type
    CompetitionPrequalification
    Main code
    72000000IT services: consulting, software development, Internet and support
    Supplemental codes

    No supplemental codes from buyer…

    Supplemental codes added by Cobrief

    72212732Data security software development services
    72212984Program testing software development services
    72254000Software testing

    Active similar competitions

    • Veikkaus Oy

      IT-drift og support

      Ohjelmiston testauksenhallintatyökalu 2026

      Veikkaus Oy tarvitsee ohjelmiston testauksenhallintatyökalun ylläpito-, tilaus- ja tukipalveluita aiemmin hankituille Testrail-ohjelmistolisensseille. Hankinnan tarkoituksena on uusia nämä palvelut. HiQ Public Oy:llä on vastaava sopimus tänään. Tarjoukset arvioidaan kokonaishinnan perusteella.

      CompetitionSep 29, 2026
      Oct 29, 2026(20 days)
    • Istekki Oy

      IT-sikkerhet

      Tietoturvapalveluiden teknologiaratkaisut 2026-2034 (DPS)

      Istekki Oy tarvitsee tietoturvapalveluiden teknologiaratkaisuja dynaamisen hankintajärjestelmän (DPS) kautta, jonka arvo on enintään 29 miljoonaa euroa ja joka on voimassa vuoteen 2034 asti. Hankinta koskee datapalveluita, kuten neuvontaa, ohjelmistokehitystä, internetiä ja järjestelmätukea. Tarjoukset arvioidaan hinnan (50 %) ja laadun (50 %) perusteella, mutta painoarvot voivat vaihdella 0–100 % välillä DPS:n sisäisissä kilpailutuksissa.

      Dynamic purchasing systemMay 22, 2026
      Nov 3, 2034(100+ days)
      €29,000,000
    • Veikkaus Oy

      Programvareprodukter og lisenser

      ROMI (Return on marketing Investment) tool

      Veikkaus Oy needs a Return On Marketing Investments (ROMI) tool and Marketing Performance Measurement as a SaaS solution. The purpose of the tool is to analyze and optimize marketing strategies and actions, specifically to model how marketing investments on offline and online channels affect gaming revenue and to forecast optimal allocation, as well as to provide short-term marketing campaign analysis and optimization capabilities. The procurement also covers associated support and expert services. Objective Platform likely has a similar contract today. Tenders will be evaluated based on price (90%) and quality (10%).

      CompetitionSep 11, 2026
      Oct 15, 2026(6 days)
    • Verohallinto

      Programvareprodukter og lisenser

      Haavoittuvuushallintajärjestelmän hankinta

      Verohallinto tarvitsee haavoittuvuushallinnan palvelun, joka sisältää pilvipalveluna (SaaS) toimitettavan haavoittuvuushallinnan järjestelmän valmisratkaisuna sekä siihen liittyvät tuki-, ylläpito- ja asiantuntijapalvelut. Hankintaan sisältyy myös optionaalisina lisäosina palveluna tuotettavan haavoittuvuushallinnan operoinnin sekä tekniset CTEM-kyvykkyydet. Sopimuksen arvo on enintään 1 miljoona euroa ja sen kesto on 3 vuotta. Hankinta sisältää PoC-vaiheen, käyttöönottovaiheen ja tuotantovaiheen. Verohallinto valitsee yhden palveluntuottajan ja yhden varatoimittajan. Nixu Oyj:llä on vastaava sopimus tänään.

      CompetitionSep 4, 2026
      Oct 8, 2026(0 days)
      €1,000,000
    • Sansia Oy

      TIETOPYYNTÖ ICT-palvelut DPS

      Sansia Oy valmistelee dynaamista hankintajärjestelmää omistaja-asiakkailleen ICT-palveluiden hankintaan. Järjestelmän kautta kilpailutetaan ja hankitaan erilaisia ICT-palveluita, jotka kuvataan tarkemmin kunkin hankinnan tarjouspyynnössä. Järjestelmän kesto voi olla 5–10 vuotta. Tarjoukset arvioidaan vertailuhinnan ja laatukriteerien perusteella.

      Dynamic purchasing systemAug 17, 2026
      Aug 31, 2036(100+ days)