Key Tender Details

Required Details Table

Scope of Work

The scope of work covers OSCP Offensive Security Certified Professional Training with certification support. The training should follow a practical, hands-on cyber security learning approach aligned with OSCP/PEN-200 standards. The selected service provider is expected to deliver classroom-based instructor-led hybrid training with lab-based practice and post-training support.

The training modules include:

1. Introduction to Penetration Testing Methodologies – covering penetration testing principles, assessment frameworks, ethical hacking concepts and cyber security posture strengthening.
2. System and Network Penetration Testing – covering enterprise systems, servers, endpoints, network infrastructure, enumeration, vulnerability assessment and exploitation techniques.
3. Exploitation of Vulnerabilities – including exploitation in operating systems and applications, buffer overflow, privilege escalation, password attacks and exploit modification.
4. Web Application Penetration Testing – covering authentication/session flaws, input validation issues, injection attacks, file inclusion and misconfiguration testing.
5. Network Pivoting and Post-Exploitation Techniques – including lateral movement, pivoting across network segments, maintaining access and data exfiltration techniques in lab environments.
6. Adversarial Thinking and Controlled Attack Simulation – developing ethical attacker mindset through guided simulations and multi-stage attack scenarios.
7. Use of Penetration Testing Tools and Manual Techniques – practical use of tools such as Metasploit Framework and Burp Suite, with emphasis on manual testing.
8. Documentation, Reporting and Professional Practices – preparing penetration testing reports with vulnerability details, risk rating, impact analysis and remediation recommendations.
9. Hands-on Labs and Practice Environment – structured lab environment for practical exercises and real-world simulation.
10. OSCP Examination Preparation and Final Assessment – mock penetration testing assessments, time-bound labs and preparation for the 24-hour practical OSCP exam.

Pre-Qualification Criteria

Bidders should meet the basic eligibility and technical requirements mentioned in the GeM bid and buyer-added terms. The bidder must have 2 years of past experience in same or similar services and should upload relevant work orders/contracts as proof. The bidder must also submit Experience Criteria, Certificate requested in ATC, and OEM Authorization Certificate as part of the bid documentation.

The buyer-added terms require the bidder to accept the buyer’s scope of training, provide all training books, lab access and certification support, and hold an OFFSEC Training Partner Certificate.

Eligibility Criteria

Eligible bidders should be registered on GeM under the relevant service category and must be capable of delivering OSCP cyber security training. The tender is for a training institute / training service provider offering advanced OSCP Offensive Security Certified Professional training. The bid specifies certification as “Yes” and certification programme as OEM Certificate.

MSE and Startup relaxations are available for turnover criteria, subject to submission of supporting documents and compliance with technical specifications. MSE purchase preference is also applicable, with purchase preference available up to L1+15% and up to 100% of bid quantity/amount as per the bid settings.

Financial Criteria

The bid follows a two-packet system, and the evaluation method is total value-wise evaluation. A financial document indicating price breakup is required. Reverse Auction is enabled, and the highest priced technically qualified bidder may be eliminated as per the RA qualification rule.

The EMD requirement is marked No. However, successful bidder performance security/ePBG is applicable at 3%, with required duration of 5 months, and the advisory bank mentioned is State Bank of India.

Tender Fee and EMD

No tender fee is mentioned in the bid document. The GeM bid disclaimer also states that asking for any tender fee or bid participation fee may make such clause invalid under GeM conditions.

EMD is not required for this bid. Therefore, EMD amount and mode of EMD are not applicable. ePBG/performance security is applicable as mentioned above.

Submission Guidelines

Bidders must submit their bids online through the GeM portal before the bid closing date. The bid is a two-packet bid, meaning technical and financial submissions must be made separately as per GeM format. Bidders should ensure that price-related information is placed only in the financial bid and not in the technical bid.

The bidder must upload all required documents, including experience documents, certificate requested under ATC, OEM authorization certificate, and OFFSEC Training Partner Certificate. Any bidder claiming exemption from experience/turnover criteria must upload valid supporting documents for evaluation by the buyer.

Bidders must also comply with applicable labour laws, GeM GTC, bid-specific terms and the Service Level Agreement applicable to the service. Any grievance related to buyer-added clauses must be raised through the GeM representation window before bid opening.

Important Deadlines

Document Checklist

Bidders should keep the following documents ready for submission: