RFT for Sonatype Nexus Repository Manager, Lifecycle and Firewall for Security Vulnerability Checking, License Compliance and Architectural Governance

In summary, the Services comprise: (1) supply of a three Sonatype tools: Nexus Repository, Lifecycle

RFT for Sonatype Nexus Repository Manager, Lifecycle and Firewall for Security Vulnerability Checking, License Compliance and Architectural Governance

Department of Social Protection_349

## Summary The Department of Social Protection is procuring a software solution for security vulnerability checking, license compliance, and architectural governance. The contract involves the supply of three Sonatype tools: Nexus Repository, Lifecycle, and Firewall.

## Scope & Deliverables - Supply of Sonatype Nexus Repository Manager, Lifecycle, and Firewall tools - Support/maintenance contract for the duration of the license - Binary repository management - Security vulnerability checking of 3rd party open source libraries - License compliance checking of those libraries - Architectural governance to manage the use of such 3rd party libraries

## Key Requirements - Eligibility: Not stated - Qualifications: + Experience in software implementation services + Compliance with EU procurement rules and regulations - Certifications: Not stated - Experience: Relevant experience in software implementation services, particularly in security vulnerability checking, license compliance, and architectural governance.

## Commercials & Timeline - Estimated value: €600,000 (excluding VAT) - Submission deadline: Monday, July 13, 2026, at 15:00 IST - Contract duration: 5 years - Framework/DPS: No framework agreement or dynamic purchasing system

## How to Bid - Submission method: Electronic submission via the eTenders website - Languages: English - Key documents to prepare: + ESPD (European Single Procurement Document) + Tender document package available on the eTenders website

## Bid Considerations - This tender may suit companies with experience in software implementation services, particularly in security vulnerability checking, license compliance, and architectural governance. - Opportunities: The contract involves a significant value of €600,000 over 5 years. - Risks: + Competition from established players in the market + Complexity of the technical requirements + Potential for changes to the scope or timeline during the contract.

Open procedure. Any interested supplier may submit a tender. There is no shortlisting stage — all compliant bids received by the deadline are evaluated against the published award criteria. It is the most common route for Irish public contracts and is open to SMEs and new entrants.

Department of Social Protection_349 has 11 tender(s) tracked on TenderScout, of which 4 are currently open. On the EU TED record this buyer has awarded 116 contract(s) worth around €1,234,060,230.

Recent awarded suppliers include HP, Threatscape, National College of Ireland, GRM, Accenture.