Tender

SSRO Security Assessment and Penetration Test

SINGLE SOURCE REGULATIONS OFFICE

This public procurement record has 1 release in its history.

Tender

19 May 2026 at 16:16

UK4 - Tender Notice
Summary of the contracting process

The Single Source Regulations Office (SSRO), a public authority in central government located at 100 Parliament Street, London, is seeking a supplier for a Security Assessment and Penetration Test. The tender process is in the active phase and entails a core programme of security services conducted annually throughout the contract period. The procurement is below threshold open competition, with tenders to be submitted via email by 8th June 2026. The contract will see various phases, beginning with Phase 1 scheduled from 6th July to 17th July 2026, Phase 2 wrapping up by 25th September 2026, and Phase 3 by 16th October 2026. The maximum contract value is £50,000, and the contract period begins on 29th June 2026 and can extend up to June 2029.

This tender presents significant opportunities for IT service providers, particularly those specialising in consulting, software development, internet, and support. Small and medium-sized enterprises (SMEs) with robust capabilities in security assessment and penetration testing are well-suited to compete. By securing this contract, businesses can strengthen their portfolio of public sector clients and enhance their reputation in providing critical IT security services. The procurement method emphasises an open competition framework, encouraging a broad range of participants to submit competitive proposals, fostering business growth through anticipated long-term collaboration with the SSRO.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

SSRO Security Assessment and Penetration Test

Notice Description

The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026.

Lot Information

Lot 1

Renewal: One optional extension of twelve months exercisable at the SSRO's discretion

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-069c47
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/045916-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£41,667 Under £100K
Lots Value
£41,667 Under £100K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
19 May 20261 weeks ago
Submission Deadline
8 Jun 20261 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
28 Jun 2026 - 28 Jun 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
SINGLE SOURCE REGULATIONS OFFICE
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1A 2BQ
Post Town
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
TLI London
Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-069c47-2026-05-19T17:16:46+01:00",
    "date": "2026-05-19T17:16:46+01:00",
    "ocid": "ocds-h6vhtk-069c47",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PCCY-1866-NYYZ",
            "name": "Single Source Regulations Office",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PCCY-1866-NYYZ"
            },
            "address": {
                "streetAddress": "100 Parliament Street",
                "locality": "London",
                "postalCode": "SW1A 2BQ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI32"
            },
            "contactPoint": {
                "name": "Jane McGovern",
                "email": "tenders@ssro.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.ssro.gov.uk/",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PCCY-1866-NYYZ",
        "name": "Single Source Regulations Office"
    },
    "tender": {
        "id": "SSRO-C-159",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "SSRO Security Assessment and Penetration Test",
        "description": "The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all \"critical\" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026.",
        "status": "active",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72000000",
                        "description": "IT services: consulting, software development, Internet and support"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKI",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 50000,
            "amount": 41667,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Below threshold - open competition",
        "mainProcurementCategory": "services",
        "aboveThreshold": false,
        "submissionMethodDetails": "Please only return Tenders by email to the SSRO at: tenders@ssro.gov.uk. The title of the email should be \"SSRO-C-159: Security Assessment and Penetration Test - Quote Submission.\" Tenders must be returned by the date and time specified in the timetable in paragraph 4.4 of the RFQ. Any Quote received after this date and time will not be considered. It is the bidders' responsibility to ensure that their Quote is received no later than the stated date and time.",
        "submissionTerms": {
            "electronicSubmissionPolicy": "notAllowed"
        },
        "tenderPeriod": {
            "endDate": "2026-06-08T17:00:00+01:00"
        },
        "enquiryPeriod": {
            "endDate": "2026-05-26T17:00:00+01:00"
        },
        "otherRequirements": {
            "reservedParticipationLocation": {
                "gazetteer": {
                    "scheme": "GB-ONS",
                    "identifiers": [
                        "K02000001"
                    ]
                }
            }
        },
        "lots": [
            {
                "id": "1",
                "status": "active",
                "value": {
                    "amountGross": 50000,
                    "amount": 41667,
                    "currency": "GBP"
                },
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "price",
                            "name": "Contract price",
                            "description": "Fixed price for three year contract",
                            "numbers": [
                                {
                                    "number": 100,
                                    "weight": "percentageExact"
                                }
                            ]
                        }
                    ]
                },
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2026-06-29T00:00:00+01:00",
                    "endDate": "2028-06-28T23:59:59+01:00",
                    "maxExtentDate": "2029-06-28T23:59:59+01:00"
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "One optional extension of twelve months exercisable at the SSRO's discretion"
                }
            }
        ],
        "documents": [
            {
                "id": "A-16368",
                "documentType": "biddingDocuments",
                "description": "Request for Quote",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16368",
                "format": "application/pdf"
            },
            {
                "id": "A-16369",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 1: Service Specification",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16369",
                "format": "application/pdf"
            },
            {
                "id": "A-16370",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 2: Quote Schedule",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16370",
                "format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
            },
            {
                "id": "A-16371",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 3: SSRO Terms and Conditions",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16371",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "A-16372",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 4: Form of Quote",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16372",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "A-16373",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 5: Conflict of Interest Schedule",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16373",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "045916-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/045916-2026",
                "datePublished": "2026-05-19T17:16:46+01:00",
                "format": "text/html"
            }
        ]
    },
    "language": "en"
}