Tender Description:

JSC ProCredit Bank is a development-oriented commercial bank offering the best services to small and medium-sized enterprises and individuals, who think that having a long-term partnership and getting banking services through electric channels is important.

ProCredit Bank has been operating in Georgia since 1999. The international Fitch Ratings agency has assigned a BB+ rating to the bank, which is the highest possible rating in Georgia.

ProCredit Bank is a part of the international ProCredit group, which is mainly represented in the countries with transitional economies in Eastern Europe and Germany. The group is founded by ProCredit Holding (Frankfurt am Main, Germany). ProCredit Holding and ProCredit group are supervised by the Federal Financial Supervisory Authority (BaFin), which is the guarantor of the credibility and stability of ProCredit banks. 

ProCredit Bank is announcing a tender for Penetration Testing Service.

Key requirements:

Find a specialized company which will conduct a targeting penetration testing on the whole perimeter of the bank’s systems.

As part of the first stage, the service provider shall submit a separate Recheck/Retesting Report, which must include the current status of each finding, the results of the verification activities performed, supporting technical evidence, and, where applicable, additional recommendations.

Company Qualification RequirementsPlease also include the following requirements in the tender documentation:

• The company must have a minimum of three (3) years of experience in the field of penetration testing.
• During the last three (3) years, the company must have successfully completed at least two (2) similar projects, preferably for banking, financial, or other regulated organizations.
• Specialists involved in the testing activities must possess relevant knowledge, practical experience, and internationally recognized certifications, such as OSCP, OSEP, OSWE, CREST, CRTO/CRTP, GIAC, or equivalent certifications.
• The company shall provide the CVs of the specialists directly involved in the project, including details of their professional experience and certifications.
• Testing must be performed in accordance with recognized industry methodologies and standards, including but not limited to:
  -  OWASP Web Security Testing Guide (OWASP WSTG)
  -  OWASP Application Security Verification Standard (OWASP ASVS)
  -  OWASP API Security Top 10
  -  Penetration Testing Execution Standard (PTES)
  -  MITRE ATT&CK Framework
  
•  The company shall provide:
  - A list of completed similar projects;
  - Client references and/or contact details of customers, where available.
  
• Retesting of identified Critical, High, and Medium-risk vulnerabilities after remediation must be included in the proposed service fee and provided at no additional cost.
• The following will be considered an advantage:
  - Possession of a valid ISO/IEC 27001 certification;
  - Demonstrated experience in delivering international penetration testing projects.

Interested persons shall submit in a sealed envelope::

• Letter of Reference, client references and/or contact details of customers, where available.
• Application Form filled and signed (see the attached file)
• Signed price list (Prices should be calculated separately for each main component: Network, 24/7 zone, social engineering, etc.)
• Professional Liability Insurance signed  
• Scope of Penetration Testing and detailed plan
• Payment Procedure
• NDA 

Interested parties will be provided with detailed information about the scope of penetration test after the signing of the NDA.Along with hardcopies, please also send digital copies of the requested documents on CD disc. Please specify on a sealed envelope:

• Name of your company
• Contact information (responsible person, telephone and e-mail)
• Name of the tender
• Name of the receiving department: Procurement Unit
• Inscription CONFIDENTIAL
• Please sign and put your company seal on the envelope.

Please deliver your tender proposal to the address at No 21 Al. Kazbegi Avenue.Interested parties can apply documentation in Georgian or in English languages.Deadline for submission: 3 September 2026 before 16:00.

For organizational issues, please contact:

Fatima Akubardia 
Specialist at Procurement Unit
JSC ProCredit Bank Georgia
Head Office, No 21 Al. Kazbegi Avenue, Tbilisi 0160
Tel.: (+995 32) 2202222 (1578)
E-mail: geo.tenders@procredit-group.com 

For technical issues, please contact:

General Risk Department
JSC ProCredit Bank Georgia
Head Office, No 21 Al. Kazbegi Avenue, Tbilisi 0160
Tel.: (+995 32) 2202222 
E-mail: geo.OpRisk@procredit-group.com

ტენდერის კატეგორია:

• 72254000 პროგრამული უზრუნველყოფის გამოცდა/შემოწმება