Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

DDaT25110 - Analysis - ICS - Provision of Annual Pen Test on CBAS Platform

ICS on behalf of DSIT and DESNZ

This public procurement record has 2 releases in its history.

AwardUpdate

03 Sep 2026 at 09:47

Award Notice
Award

29 Jul 2025 at 13:19

Award Notice
Summary of the contracting process

ICS, acting for the Department for Science, Innovation and Technology and the Department for Energy Security and Net Zero, required annual penetration testing of the CBAS platform. This is a software security testing service, intended to identify vulnerabilities and assess the platform’s resilience against unauthorised access. The buying organisation is based at Polaris House in Swindon. The stated delivery coverage includes the United Kingdom, Europe, the Channel Islands, the Isle of Man, British Overseas Territories and the rest of the world, so suppliers should be able to support activity across a broad geographical area where required. The procurement concerns specialist cyber security testing rather than the supply of physical goods, despite the recorded category classification.

This procurement is complete and was awarded on 30 June 2025 to Cyberis Ltd. It was run as a selective call-off from the G-Cloud 14 framework, reference RM1557.14, rather than as an open competition. The awarded contract value is £85,000 excluding VAT, with a minimum stated value of £50,600. The contract runs from 30 June 2025 to 26 June 2027. A variation increased the maximum call-off value to £85,000 and changed the end date to 26 June 2027. The tender submission deadline was 29 June 2025 at 23:59. The opportunity was identified as suitable for small and medium-sized enterprises and not reserved for voluntary, community or social enterprises.

This award indicates a defined public-sector requirement for recurring penetration testing of the CBAS platform, delivered through a government technology framework. Competitors would need established cyber security testing capability, with practical experience of penetration testing software platforms and producing findings that can support remediation and assurance. The requirement suits specialist security consultancies able to undertake planned annual testing and operate across the United Kingdom and the wider locations identified for delivery. A credible future supplier would also need to understand the commercial and administrative requirements of a G-Cloud call-off, including framework eligibility and call-off processes. Cyberis Ltd is recorded as an SME, indicating that a focused specialist firm can meet the buyer’s expectations at this scale.

How relevant is this notice?

Notice Information

Notice Title

DDaT25110 - Analysis - ICS - Provision of Annual Pen Test on CBAS Platform

Notice Description

***** THIS IS AN AWARD NOTICE, NOT A CALL FOR COMPETITION ***** Department for Energy Security and Net Zero (DESNZ) had a requirement for the provision of Penetration testing. This procurement is being concluded under the G-Cloud 14 (RM1557.14) Framework.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-88cda5ad-ce63-4dd3-977c-5397fd033fe9
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/d7614867-f66d-4fd9-911e-49c18cae809b
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Goods
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72254000 - Software testing

Notice Value(s)

Tender Value
£25,300 Under £100K
Lots Value
Not specified
Awards Value
£25,300 Under £100K
Contracts Value
Not specified

Notice Dates

Publication Date
29 Jul 20251 years ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
30 Jun 20251 years ago
Contract Period
30 Jun 2025 - 26 Jun 2026 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
ICS on behalf of DSIT and DESNZ
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON
Postcode
SN2 1FF
Postcode Area
Swindon
Country
England
Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified
Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Supplier Information

Number of Suppliers
1
Supplier Name

CYBERIS LIMITED

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...