Project "7ASecurity Open Digital Infrastructure Audits"

Published

23 February 2026

Procedure

neg-wo-call

Lots

1

Notice number

00124093-2026

Reference

30fa3b1a-56d6-41ec-a93c-59c8626a6c94

Official source

Official source

CPV codes

• 73000000Servicios de investigación y desarrollo y servicios de consultoría conexos
• 73000000Servicios de investigación y desarrollo y servicios de consultoría conexos

Description

The contract concerns the project "7A Security Open Digital Infrastructure Audits", which covers the independent security audit of four open source infrastructure components: 'Samba', the leading open source implementation of network file sharing and identity management; 'OpenBGPD', an open source Internet routing protocol implementation used at exchange points and service providers; 'Incus', an open source container and virtual machine manager for running isolated workloads on shared infrastructure; and 'OpenPrinting/CUPS', the standard open source printing system for Linux and Unix-based environments. As part of several milestones, the contract covers security code review and targeted testing of high-risk surfaces, automated input testing to uncover defects, supply chain and release integrity review, and the production of threat models for long-term prioritization. The aim of this service is to sustainably strengthen the overall security, resilience and trustworthiness of widely deployed open digital infrastructure in the public interest.

Frequently asked questions

Who is the buyer of this tender?

The contracting authority is Sovereign Tech Agency GmbH (European Union).