Planning

Threat Led Penetration Testing - Black Team

UK SPACE AGENCY

This public procurement record has 2 releases in its history.

PlanningUpdate

26 Sep 2025 at 08:57

Planning

24 Sep 2025 at 16:10

Summary of the contracting process

The UK Space Agency, in collaboration with UK Shared Business Services Ltd, is initiating a procurement process for "Threat Led Penetration Testing - Black Team". The project, valued at up to £240,000, falls under the industry category of investigation and security services and aims to enhance the security resilience of companies within the UK space industry. The procurement is in the planning stage, and the process is being conducted through an open procedure. The final submission date for the Selection Questionnaire is 1st October 2025 at 14:00, with the tender period ending on 3rd November 2025. The contract period is set to start on 17th November 2025 and may extend until 31st March 2026, with potential for a year-long extension.

This tender presents significant opportunities for businesses specialising in security services, particularly those with expertise in penetration testing and physical security solutions. Given that the procurement aims to work with multiple companies concurrently, businesses capable of managing complex, multi-client engagements will find this an attractive opportunity for growth. SMEs are deemed suitable for this contract, providing an excellent opportunity for smaller firms to expand their reach into the government security sector. Additionally, the open procedure of the procurement process offers a level playing field for all qualified suppliers, encouraging competitive participation based on price and quality criteria.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Notice Title

Threat Led Penetration Testing - Black Team

Notice Description

UKSA is seeking a supplier to provide physical penetration testing for a number of companies working in the space industry, in order to; * Support companies with understanding their existing security and resilience to physical attack. * Inform corrections and upgrades to physical security by identifying vulnerabilities and providing recommendations for improvement. * There is a likely to be the requirement to work with multiple (up to 4) companies at the same time in order to complete the work packages below within the timescale of the contract. Full details will be available in the forthcoming specification. How To Apply ***In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required*** Please read instructions in the submission section.

Lot Information

Lot 1

Renewal: Up to PS240,000 (including VAT) 5 months + 1-year optional extension to be granted at the Contracting Authority's discretion, subject to budget availability. Up to PS120,000 (including VAT) for initial 5 months and PS120,000 (including VAT) for subsequent extension period. This is a call off value and not necessarily the full value of the contract as payment will only be made on completion of deliverables.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-05a180
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/059973-2025
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK3 - Planned Procurement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

79700000 - Investigation and security services

Notice Value(s)

Tender Value
£200,000 £100K-£500K
Lots Value
£200,000 £100K-£500K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
26 Sep 20255 months ago
Submission Deadline
3 Nov 2025Expired
Future Notice Date
8 Oct 2025Expired
Award Date
Not specified
Contract Period
17 Nov 2025 - 31 Mar 2026 1-6 months
Recurrence
Not specified

Notice Status

Tender Status
Planned
Lots Status
Planned
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
UK SPACE AGENCY
Additional Buyers

UK SHARED BUSINESS SERVICES LTD

Contact Name
Not specified
Contact Email
commercial@ukspaceagency.gov.uk, policy@uksbs.co.uk
Contact Phone
Not specified

Buyer Location

Locality
DIDCOT
Postcode
OX11 0DF
Post Town
Oxford
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified

Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-05a180-2025-09-26T09:57:19+01:00",
    "date": "2025-09-26T09:57:19+01:00",
    "ocid": "ocds-h6vhtk-05a180",
    "initiationType": "tender",
    "planning": {
        "documents": [
            {
                "id": "059443-2025",
                "documentType": "plannedProcurementNotice",
                "noticeType": "UK3",
                "description": "Planned procurement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/059443-2025",
                "datePublished": "2025-09-24T17:10:46+01:00",
                "format": "text/html"
            },
            {
                "id": "059973-2025",
                "documentType": "plannedProcurementNotice",
                "noticeType": "UK3",
                "description": "Planned procurement notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/059973-2025",
                "datePublished": "2025-09-26T09:57:19+01:00",
                "format": "text/html"
            }
        ]
    },
    "parties": [
        {
            "id": "GB-PPON-PRTY-4245-MTJY",
            "name": "UK Space Agency",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PRTY-4245-MTJY"
            },
            "address": {
                "streetAddress": "Quad Two Building 1st Floor, Rutherford Avenue, Harwell Science and Innovation Campus",
                "locality": "Didcot",
                "postalCode": "OX11 0DF",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKJ14"
            },
            "contactPoint": {
                "email": "commercial@ukspaceagency.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "classifications": [
                    {
                        "scheme": "UK_CA_TYPE",
                        "id": "publicAuthorityCentralGovernment",
                        "description": "Public authority - central government"
                    }
                ]
            }
        },
        {
            "id": "GB-PPON-PMPN-7535-GNTG",
            "name": "UK Shared Business Services Ltd",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PMPN-7535-GNTG"
            },
            "address": {
                "streetAddress": "Polaris House, North Star Avenue",
                "locality": "Swindon",
                "postalCode": "SN2 1FF",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKK14"
            },
            "contactPoint": {
                "email": "policy@uksbs.co.uk"
            },
            "roles": [
                "procuringEntity",
                "processContactPoint"
            ],
            "roleDetails": "Managing bid submissions"
        }
    ],
    "buyer": {
        "id": "GB-PPON-PRTY-4245-MTJY",
        "name": "UK Space Agency"
    },
    "tender": {
        "id": "UKSAC25_0071",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Threat Led Penetration Testing - Black Team",
        "description": "UKSA is seeking a supplier to provide physical penetration testing for a number of companies working in the space industry, in order to; * Support companies with understanding their existing security and resilience to physical attack. * Inform corrections and upgrades to physical security by identifying vulnerabilities and providing recommendations for improvement. * There is a likely to be the requirement to work with multiple (up to 4) companies at the same time in order to complete the work packages below within the timescale of the contract. Full details will be available in the forthcoming specification. How To Apply ***In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required*** Please read instructions in the submission section.",
        "status": "planned",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "79700000",
                        "description": "Investigation and security services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 240000,
            "amount": 200000,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Open procedure",
        "mainProcurementCategory": "services",
        "aboveThreshold": true,
        "submissionMethodDetails": "***The deadline date and time for the EoI Selection Questionnaire submission is Wednesday 1st October 2025 @14:00*** In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required. The objective of this Selection questionnaire is to identify a-list of capable potential Bidders (on the basis of the evaluation criteria set out herein) who will participate in a subsequent Tender exercise for the award of a Contract for \"Thread Led Penetration Testing - Black Team\". Prospective bidders should note that no material changes to the Non Disclosure agreement will be considered. All communication with the Authority must be conducted via the Procurement Portal: Jaggaer. Where a supplier is unsure or requires any clarification, they should check with the contracting authority by the date set out in the notice. The Contracting Authority confirms that it will keep confidential and will not disclose to any third parties any information obtained from a named Potential Supplier's, other than to the other collaborating parts of the Crown that are supporting the UK Space agency with the competition and/or Contracting Authorities obligations herby advised herein and defined by the regulations, or pursuant to an order of the court or demand made by any competent authority or body where the authority is under a legal or regulatory obligation to make such a disclosure e.g. a Freedom of Information Request. Please note that the Contracting Authority does not have any involvement in regard to the running and or maintenance control over the CDP, therefore any queries in regard to using this system will need to be via the Cabinet Office CDP Technical help options. How to Apply To register on the Jaggaer eSourcing portal please use the link https://beisgroup.ukp.app.jaggaer.com/ and follow the instructions to register as a supplier. Once you are logged into the system you will be able to locate the Procurement you wish to leave a bid on by clicking the ITTs Open to All Suppliers and searching for the reference number (UKSAC25_0071 and itt_2314) All enquiries with respect to access to the eSourcing portal and problems with functionality within the portal must be submitted to the eSourcing Helpdesk Phone 08000 698 632 Email customersupport@jaggaer.com",
        "submissionTerms": {
            "electronicSubmissionPolicy": "allowed",
            "languages": [
                "en"
            ]
        },
        "tenderPeriod": {
            "endDate": "2025-11-03T14:00:00Z"
        },
        "enquiryPeriod": {
            "endDate": "2025-10-15T14:00:00+01:00"
        },
        "awardPeriod": {
            "endDate": "2025-11-17T23:59:59Z"
        },
        "lots": [
            {
                "id": "1",
                "status": "planned",
                "value": {
                    "amountGross": 240000,
                    "amount": 200000,
                    "currency": "GBP"
                },
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "price",
                            "name": "Price",
                            "numbers": [
                                {
                                    "number": 20,
                                    "weight": "percentageExact"
                                }
                            ]
                        },
                        {
                            "type": "quality",
                            "name": "Approach and Methodology",
                            "numbers": [
                                {
                                    "number": 30,
                                    "weight": "percentageExact"
                                }
                            ]
                        },
                        {
                            "type": "quality",
                            "name": "Timescales and Risk Management",
                            "numbers": [
                                {
                                    "number": 10,
                                    "weight": "percentageExact"
                                }
                            ]
                        },
                        {
                            "type": "quality",
                            "name": "Staff to Deliver",
                            "numbers": [
                                {
                                    "number": 30,
                                    "weight": "percentageExact"
                                }
                            ]
                        },
                        {
                            "type": "quality",
                            "name": "Social Value",
                            "numbers": [
                                {
                                    "number": 10,
                                    "weight": "percentageExact"
                                }
                            ]
                        }
                    ]
                },
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2025-11-17T00:00:00Z",
                    "endDate": "2026-03-31T23:59:59+01:00",
                    "maxExtentDate": "2027-03-31T23:59:59+01:00"
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "Up to PS240,000 (including VAT) 5 months + 1-year optional extension to be granted at the Contracting Authority's discretion, subject to budget availability. Up to PS120,000 (including VAT) for initial 5 months and PS120,000 (including VAT) for subsequent extension period. This is a call off value and not necessarily the full value of the contract as payment will only be made on completion of deliverables."
                }
            }
        ],
        "communication": {
            "futureNoticeDate": "2025-10-08T23:59:59+01:00"
        },
        "contractTerms": {
            "financialTerms": "A milestone payment plan may be proposed and/or agreed upon post contract award. This plan should reflect key delivery stages and associated payment triggers. Payment upon successful delivery of work packages/deliverables."
        },
        "riskDetails": "Security and confidentiality requirements: * This opportunity will be restricted to companies based in the United Kingdom on grounds of national security - suppliers will be asked to complete an initial expression of interest and meet the Conditions of Participation included within this to be granted access to tender documentation * There are security implications as in effect the delivery org is 'undertaking unauthorised access' (except at the knowledge and agreement with the industry SPOC) to secure buildings. The contract org will be aware of the requirements to notify the emergency services and take appropriate steps to avoid any active emergency response. * End of assessment reports on vulnerabilities and recommendations for rectification will be owned by the company assessed and discussions, transfer of information between the deliver party and receiving org need to be confidential. The delivery org should not retain any intelligence material or assessments after the end of the contract. UKSA will hold executive summary reports on each assessment securely for use in future discussions. * UKSA will not be publishing details of the awarded supplier as this information is considered exempt on national security grounds, in order to protect the sensitive information this supplier will have access to (Section 94)"
    },
    "language": "en"
}