This public procurement record has 6 releases in its history.

AwardUpdate

07 Oct 2026 at 15:39

AwardUpdate

06 Aug 2026 at 16:00

AwardUpdate

01 Jun 2026 at 15:00

AwardUpdate

06 May 2026 at 14:04

AwardUpdate

19 Mar 2026 at 17:12

Award

13 Jan 2025 at 14:18

Summary of the contracting process

UK Research and Innovation (UKRI) required penetration testing services to assess the security of its systems. The work covers security assessments and additional testing services, including assessments added through contract variations. UK Shared Business Services Limited is the buyer. The recorded delivery postcode is SN2 1PL, in Swindon, England. This is a specialist cybersecurity testing requirement rather than a purchase of general software or routine IT support. The procurement classification is associated with software testing services (CPV 72212984), although the stated requirement is specifically penetration testing. The work was sourced through the G-Cloud 14 framework, providing context for suppliers experienced in delivering security testing through public-sector framework call-offs.

The procurement is complete: NCC Group Security Services Ltd was selected for the contract. The award date was 24 November 2024, and the contract period runs from 6 January 2025 to 5 January 2028. The awarded contract value is £222,680 excluding VAT, following variations for additional security assessments and testing. The original estimated tender value was £64,000. The requirement was procured by direct award as a call-off from the G-Cloud 14 framework; the tender method is recorded as selective. The original submission deadline was 25 September 2024. The data marks the procurement as suitable for small and medium-sized enterprises. No separate evaluation criteria are described, so the basis on which the supplier was selected cannot be stated more specifically.

For suppliers considering comparable UKRI work, the award demonstrates demand for penetration testing, security assessments and additional testing delivered through a G-Cloud call-off. A credible competitor would need demonstrable capability to test systems for security weaknesses and to provide assessments that can be added as project requirements evolve. The selected provider was a large security services company, indicating that the buyer accepted a specialist supplier with capacity to deliver an expanding programme of testing. Small and medium-sized enterprises were considered suitable for the requirement, so scale alone need not rule out a capable smaller provider. Relevant experience in public-sector framework delivery and the ability to support additional testing within an established call-off would strengthen a supplier’s fit when UKRI has a similar requirement.

How relevant is this notice?

Notice Information

Notice Title

UKRI Penetration Testing Services

Notice Description

***Please note this is an award notice, not a call for competition*** UK Research and Innovation had a requirement for Penetration Testing Services. This has been sourced via direct award against the RM1557.14 G-Cloud 14 framework. ***Variation 001 has been conducted to include additional services required for implementation off security assessments, utilising built in contingency as per the call-off contract. This variation is totalled at PS52,480.00 excluding VAT. *** ***Variation 002 has been conducted to include additional services as required for the project, utilising built in contingency as per the call-off contract as per the call-off contract. This variation is totalled at PS19,080.00 excluding VAT.*** ***Variation 003 has been conducted to incorporate additional security security assessments, utilising built in contingency as per the call-off contract. This variation is totalled at PS11,780.00 excluding VAT. *** ***Variation 004 has been conducted to incorporate additional security security assessments, utilising built in contingency as per the call-off contract. This variation is totalled at PS8,480.00 excluding VAT. *** ***Variation 005 has been conducted to incorporate additional testing services, utilising built in contingency as per the call-off contract. This variation is totalled at PS47,260.00 excluding VAT. *** ***As per Contract Variation 006 the new contract value is PS218,280.00. excluding VAT. *** ***Variation 007 has been conducted to incorporate additional testing services, utilising built in contingency as per the call-off contract. This variation is totalled at PS4,400.00 excluding VAT. The new contract value is PS222,680.00. excluding VAT ***

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-02ab3ede-3735-4f6d-a280-5b5eea766387
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/792d1f23-b4d2-4138-94a1-8f3a9c0c5f54
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Goods
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72212984 - Program testing software development services

Notice Value(s)

Tender Value
£64,000 Under £100K
Lots Value
Not specified
Awards Value
£222,680 £100K-£500K
Contracts Value
Not specified

Notice Dates

Publication Date
7 Oct 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
24 Nov 20241 years ago
Contract Period
6 Jan 2025 - 5 Jan 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
UK SHARED BUSINESS SERVICES LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON
Postcode
SN2 1FL
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified

Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Supplier Information

Number of Suppliers
1
Supplier Name

NCC Group Security Services Limited

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...