Notice Information
Notice Title
Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security
Notice Description
Thames Water Utilities Ltd (TWUL) is intending to award a framework agreement for the supply of security services for its IT and OT environments on a planned and project basis.
Lot Information
Lot 1
Application software security including but not limited to; Code Reviews, Static and Dynamic Code Scanning and Code Reviews, Code De-Buggers, Compilers, Configuration Validation.
Options: Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years
Renewal: Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-04cffc
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/063191-2026
- Current Stage
- Award
- All Stages
- Tender, Award
Procurement Classification
- Notice Type
- Tender Notice
- Procurement Type
- Framework
- Procurement Category
- Services
- Procurement Method
- Selective
- Procurement Method Details
- Negotiated procedure with prior call for competition
- Tender Suitability
- Not specified
- Awardee Scale
- Large, SME
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72000000 - IT services: consulting, software development, Internet and support
72800000 - Computer audit and testing services
Notice Value(s)
- Tender Value
- £8,000,000 £1M-£10M
- Lots Value
- £8,000,000 £1M-£10M
- Awards Value
- Not specified
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 6 Jul 20262 weeks ago
- Submission Deadline
- 30 Jan 2025Expired
- Future Notice Date
- Not specified
- Award Date
- 6 Jan 20266 months ago
- Contract Period
- Not specified - Not specified
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Cancelled
- Awards Status
- Active
- Contracts Status
- Active
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- THAMES WATER UTILITIES LIMITED
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- READING
- Postcode
- RG1 8DB
- Post Town
- Reading
- Country
- England
-
- Major Region (ITL 1)
- TLJ South East (England)
- Basic Region (ITL 2)
- TLJ1 Berkshire, Buckinghamshire and Oxfordshire
- Small Region (ITL 3)
- TLJ16 Berkshire West
- Delivery Location
- TLI London, TLJ South East (England)
-
- Local Authority
- Reading
- Electoral Ward
- Thames
- Westminster Constituency
- Reading Central
Further Information
Open Contracting Data Standard (OCDS)
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-04cffc-2026-07-06T13:15:30+01:00",
"date": "2026-07-06T13:15:30+01:00",
"ocid": "ocds-h6vhtk-04cffc",
"description": "All suppliers who wish to respond to this contract notice must request a pre-qualification questionnaire (PQQ) by using the web link in Section I.3 (www.thameswater.co.uk/procurement). From your response to the link in Section I.3 or above, Thames Water's Procurement Support Centre will send you an email providing login details for our eSourcing system. To complete the PQQ you will need to login to the project SharePoint site. If the project requires it, you will receive an additional and separate survey to complete for Data Protection. Note - The client may be Thames Water Utilities Limited or another company within the Kemble Water group structure",
"initiationType": "tender",
"tender": {
"id": "FA2220",
"legalBasis": {
"id": "32014L0025",
"scheme": "CELEX"
},
"title": "Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security",
"status": "complete",
"classification": {
"scheme": "CPV",
"id": "72000000",
"description": "IT services: consulting, software development, Internet and support"
},
"mainProcurementCategory": "services",
"description": "Thames Water Utilities Ltd (TWUL) is intending to award a framework agreement for the supply of security services for its IT and OT environments on a planned and project basis.",
"value": {
"amount": 8000000,
"currency": "GBP"
},
"lots": [
{
"id": "1",
"description": "Application software security including but not limited to; Code Reviews, Static and Dynamic Code Scanning and Code Reviews, Code De-Buggers, Compilers, Configuration Validation.",
"value": {
"amount": 8000000,
"currency": "GBP"
},
"contractPeriod": {
"durationInDays": 2880
},
"hasRenewal": true,
"renewal": {
"description": "Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years"
},
"secondStage": {
"minimumCandidates": 15,
"maximumCandidates": 15
},
"submissionTerms": {
"variantPolicy": "allowed"
},
"hasOptions": true,
"options": {
"description": "Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years"
},
"status": "cancelled"
}
],
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "72800000",
"description": "Computer audit and testing services"
}
],
"deliveryAddresses": [
{
"region": "UKI"
},
{
"region": "UKJ"
},
{
"region": "UKI"
},
{
"region": "UKJ"
}
],
"deliveryLocation": {
"description": "Whole of the Thames Water Region"
},
"relatedLot": "1"
}
],
"participationFees": [
{
"id": "1",
"type": [
"document"
]
}
],
"submissionMethod": [
"electronicSubmission"
],
"submissionMethodDetails": "https://thameswater.sharepoint.com/sites/ProcurementSupportCentreBidProcessRepository/FA2220CyberSecurity",
"otherRequirements": {
"reductionCriteria": "As detailed in section VI.3 & PQQ."
},
"submissionTerms": {
"depositsGuarantees": "Bonds and/or parent company guarantees of performance and financial standing may be required",
"languages": [
"en"
]
},
"contractTerms": {
"financialTerms": "Specified in Invitation to Negotiate Document",
"tendererLegalForm": "Consortia may be required to form a legal entity prior to award",
"hasElectronicOrdering": true,
"electronicInvoicingPolicy": "allowed",
"hasElectronicPayment": true
},
"procurementMethod": "selective",
"procurementMethodDetails": "Negotiated procedure with prior call for competition",
"tenderPeriod": {
"endDate": "2025-01-30T10:00:00Z"
},
"hasRecurrence": true,
"reviewDetails": "Thames Water Utilities Limited will incorporate a standstill period at the point information on the award of the contract is communicated to tenderers. That notification will provide full information on the award decision. The standstill period, which will be for a minimum of 10 calendar days, provides time for unsuccessful tenderers to challenge the award decision before the contract is entered into. The Utilities Contracts Regulations 2016 (SI 2016 No 274) provide for aggrieved parties who have been harmed or are at risk of harm by a breach of the rules to take action in the High Court (England, Wales and Northern Ireland).",
"techniques": {
"hasFrameworkAgreement": true,
"hasElectronicAuction": true
}
},
"parties": [
{
"id": "GB-COH-02366661",
"name": "THAMES WATER UTILITIES LIMITED",
"identifier": {
"legalName": "THAMES WATER UTILITIES LIMITED",
"id": "02366661",
"scheme": "GB-COH"
},
"address": {
"locality": "Reading",
"region": "UKJ11",
"postalCode": "RG18DB",
"countryName": "United Kingdom",
"streetAddress": "Clearwater Court"
},
"contactPoint": {
"name": "Thames Water",
"email": "procurement.support.centre@thameswater.co.uk",
"url": "https://forms.office.com/e/MAibfske6p"
},
"roles": [
"buyer"
],
"details": {
"url": "https://www.thameswater.co.uk/",
"classifications": [
{
"id": "WATER",
"scheme": "TED_CE_ACTIVITY",
"description": "Water"
}
]
}
},
{
"id": "GB-FTS-4846",
"name": "Thames Water Utilities Ltd",
"identifier": {
"legalName": "Thames Water Utilities Ltd"
},
"address": {
"locality": "Reading",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
},
{
"id": "GB-COH-07800173",
"name": "2-sec Limited",
"identifier": {
"legalName": "2-sec Limited",
"id": "07800173",
"scheme": "GB-COH"
},
"address": {
"locality": "London",
"region": "UKI",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-10353328",
"name": "3B Data Security Ltd",
"identifier": {
"legalName": "3B Data Security Ltd",
"id": "10353328",
"scheme": "GB-COH"
},
"address": {
"locality": "Tunbridge Wells",
"region": "UKJ4",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-11551941",
"name": "AMR CyberSecurity LTD",
"identifier": {
"legalName": "AMR CyberSecurity LTD",
"id": "11551941",
"scheme": "GB-COH"
},
"address": {
"locality": "Fareham",
"region": "UKJ3",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-09393211",
"name": "Avella Security Ltd",
"identifier": {
"legalName": "Avella Security Ltd",
"id": "09393211",
"scheme": "GB-COH"
},
"address": {
"locality": "Birmingham",
"region": "UKG3",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-11101195",
"name": "Bridewell Consulting Limited",
"identifier": {
"legalName": "Bridewell Consulting Limited",
"id": "11101195",
"scheme": "GB-COH"
},
"address": {
"locality": "Reading",
"region": "UKJ1",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-03908168",
"name": "Dionach Limited",
"identifier": {
"legalName": "Dionach Limited",
"id": "03908168",
"scheme": "GB-COH"
},
"address": {
"locality": "Oxfordshire",
"region": "UKJ1",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-01147167",
"name": "Expleo UK Limited",
"identifier": {
"legalName": "Expleo UK Limited",
"id": "01147167",
"scheme": "GB-COH"
},
"address": {
"locality": "Lancashire",
"region": "UKD4",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-11806111",
"name": "Halo I.S Ltd",
"identifier": {
"legalName": "Halo I.S Ltd",
"id": "11806111",
"scheme": "GB-COH"
},
"address": {
"locality": "Leeds",
"region": "UKE2",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "sme"
}
},
{
"id": "GB-COH-SC112019",
"name": "MTI Technology Ltd",
"identifier": {
"legalName": "MTI Technology Ltd",
"id": "SC112019",
"scheme": "GB-COH"
},
"address": {
"locality": "Edinburgh",
"region": "UKM75",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-09923929",
"name": "Red Team Partners Limited",
"identifier": {
"legalName": "Red Team Partners Limited",
"id": "09923929",
"scheme": "GB-COH"
},
"address": {
"locality": "London",
"region": "UKI",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-COH-OC353362",
"name": "Pen Test Partners LLP",
"identifier": {
"legalName": "Pen Test Partners LLP",
"id": "OC353362",
"scheme": "GB-COH"
},
"address": {
"locality": "Buckingham",
"region": "UKJ1",
"countryName": "United Kingdom"
},
"roles": [
"supplier"
],
"details": {
"scale": "large"
}
},
{
"id": "GB-FTS-33107",
"name": "Thames Water",
"identifier": {
"legalName": "Thames Water"
},
"address": {
"locality": "Reading",
"countryName": "United Kingdom"
},
"roles": [
"reviewBody"
]
}
],
"buyer": {
"id": "GB-COH-02366661",
"name": "THAMES WATER UTILITIES LIMITED"
},
"language": "en",
"awards": [
{
"id": "063191-2026-1",
"relatedLots": [
"1"
],
"title": "2-sec Limited",
"status": "active",
"suppliers": [
{
"id": "GB-COH-07800173",
"name": "2-sec Limited"
}
]
},
{
"id": "063191-2026-2",
"relatedLots": [
"1"
],
"title": "3B Data Security Ltd",
"status": "active",
"suppliers": [
{
"id": "GB-COH-10353328",
"name": "3B Data Security Ltd"
}
]
},
{
"id": "063191-2026-3",
"relatedLots": [
"1"
],
"title": "AMR CyberSecurity LTD",
"status": "active",
"suppliers": [
{
"id": "GB-COH-11551941",
"name": "AMR CyberSecurity LTD"
}
]
},
{
"id": "063191-2026-4",
"relatedLots": [
"1"
],
"title": "Avella Security Ltd",
"status": "active",
"suppliers": [
{
"id": "GB-COH-09393211",
"name": "Avella Security Ltd"
}
]
},
{
"id": "063191-2026-5",
"relatedLots": [
"1"
],
"title": "Bridewell Consulting Limited",
"status": "active",
"suppliers": [
{
"id": "GB-COH-11101195",
"name": "Bridewell Consulting Limited"
}
]
},
{
"id": "063191-2026-6",
"relatedLots": [
"1"
],
"title": "Dionach Limited",
"status": "active",
"suppliers": [
{
"id": "GB-COH-03908168",
"name": "Dionach Limited"
}
]
},
{
"id": "063191-2026-7",
"relatedLots": [
"1"
],
"title": "Expleo UK Limited",
"status": "active",
"suppliers": [
{
"id": "GB-COH-01147167",
"name": "Expleo UK Limited"
}
]
},
{
"id": "063191-2026-8",
"relatedLots": [
"1"
],
"title": "Halo I.S Ltd",
"status": "active",
"suppliers": [
{
"id": "GB-COH-11806111",
"name": "Halo I.S Ltd"
}
]
},
{
"id": "063191-2026-9",
"relatedLots": [
"1"
],
"title": "MTI Technology Ltd",
"status": "active",
"suppliers": [
{
"id": "GB-COH-SC112019",
"name": "MTI Technology Ltd"
}
]
},
{
"id": "063191-2026-10",
"relatedLots": [
"1"
],
"title": "Red Team Partners Limited",
"status": "active",
"suppliers": [
{
"id": "GB-COH-09923929",
"name": "Red Team Partners Limited"
}
]
},
{
"id": "063191-2026-11",
"relatedLots": [
"1"
],
"title": "Pen Test Partners LLP",
"status": "active",
"suppliers": [
{
"id": "GB-COH-OC353362",
"name": "Pen Test Partners LLP"
}
]
}
],
"contracts": [
{
"id": "063191-2026-1",
"awardID": "063191-2026-1",
"title": "2-sec Limited",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-2",
"awardID": "063191-2026-2",
"title": "3B Data Security Ltd",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-3",
"awardID": "063191-2026-3",
"title": "AMR CyberSecurity LTD",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-4",
"awardID": "063191-2026-4",
"title": "Avella Security Ltd",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-5",
"awardID": "063191-2026-5",
"title": "Bridewell Consulting Limited",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-6",
"awardID": "063191-2026-6",
"title": "Dionach Limited",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-7",
"awardID": "063191-2026-7",
"title": "Expleo UK Limited",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-8",
"awardID": "063191-2026-8",
"title": "Halo I.S Ltd",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-9",
"awardID": "063191-2026-9",
"title": "MTI Technology Ltd",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-10",
"awardID": "063191-2026-10",
"title": "Red Team Partners Limited",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
},
{
"id": "063191-2026-11",
"awardID": "063191-2026-11",
"title": "Pen Test Partners LLP",
"status": "active",
"dateSigned": "2026-01-06T00:00:00Z"
}
]
}