France – IT services: consulting, software development, Internet and support – Solution de scan des vulnérabilités

This contract is a single-supplier framework agreement for the purchase of an OnPremise vulnerability scanning solution covering the entire SNCF IT system. This solution aims to identify security vulnerabilities, prioritize their remediation, and ensure permanent visibility of the security level of the IT system, in a proactive approach to reducing cyber risk. Fixed scope: covers 20,000 servers and hypervisors, 260,000 Docker images scanned from a private Harbor registry (including 1,000 new images per day), and 100 security equipment items of the Firewall type. Optional scope: 40,000 network equipment items (Reverse-Proxies, Load-Balancers, routers, switches) and 300 Kubernetes clusters (Azure AKS, AWS EKS, Talos, RKE2), representing approximately 2,500 VM. Optional PSE: external scan covering at least 50,000 assets exposed on the Internet. The contract covers the supply of software licenses and associated support, as well as assistance with integration into the SNCF environment (deployment, parameterization, customization of the interface, interconnections with existing components, opening of flows).