Tender

SSRO Security Assessment and Penetration Test

SINGLE SOURCE REGULATIONS OFFICE

This public procurement record has 2 releases in its history.

TenderUpdate

01 Jun 2026 at 16:25

UK4 - Tender Notice
Tender

19 May 2026 at 16:16

UK4 - Tender Notice
Summary of the contracting process

The Single Source Regulations Office (SSRO) is inviting tenders for its Security Assessment and Penetration Testing services as part of an open competition procurement process. The procurement, titled "SSRO Security Assessment and Penetration Test," falls under the IT services category and is valued at £50,000. The SSRO, based in London, is a central government public authority located at 100 Parliament Street, is managing this active tender aimed at enhancing its security measures. The procurement method is below the threshold and includes stages such as security assessments and vulnerability retesting planned for the second half of 2026. Interested parties must submit their tenders via email by 8th June 2026, with a detailed timetable and specifications outlined in the request for quote documents.

This tender presents significant opportunities for businesses specialising in IT services, specifically those experienced in security assessments and penetration testing. Given the three-year contract (with an additional optional twelve-month extension) and the focus on addressing vulnerabilities within IT infrastructures, firms with expertise in cyber security, consulting, and support are well-suited to compete. Notably, the project is designed to be inclusive of small and medium enterprises (SMEs), which further expands the opportunities for a diverse range of suppliers to engage in a high-profile government contract. Successful participation could bolster business growth, offering a foothold into government contracts and showcasing capabilities in managing critical infrastructure projects.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

SSRO Security Assessment and Penetration Test

Notice Description

The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026.

Lot Information

Lot 1

Renewal: One optional extension of twelve months exercisable at the SSRO's discretion

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-069c47
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/051600-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£41,667 Under £100K
Lots Value
£41,667 Under £100K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
1 Jun 20266 days ago
Submission Deadline
8 Jun 2026Today
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
28 Jun 2026 - 28 Jun 2028 2-3 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
SINGLE SOURCE REGULATIONS OFFICE
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1A 2BQ
Post Town
South West London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
TLI London
Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-069c47-2026-06-01T17:25:58+01:00",
    "date": "2026-06-01T17:25:58+01:00",
    "ocid": "ocds-h6vhtk-069c47",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PCCY-1866-NYYZ",
            "name": "Single Source Regulations Office",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PCCY-1866-NYYZ"
            },
            "address": {
                "streetAddress": "100 Parliament Street",
                "locality": "London",
                "postalCode": "SW1A 2BQ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKI32"
            },
            "contactPoint": {
                "name": "Jane McGovern",
                "email": "tenders@ssro.gov.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.ssro.gov.uk/",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PCCY-1866-NYYZ",
        "name": "Single Source Regulations Office"
    },
    "tender": {
        "id": "SSRO-C-159",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "SSRO Security Assessment and Penetration Test",
        "description": "The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all \"critical\" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026.",
        "status": "active",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72000000",
                        "description": "IT services: consulting, software development, Internet and support"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UKI",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    },
                    {
                        "region": "UKI",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 50000,
            "amount": 41667,
            "currency": "GBP"
        },
        "procurementMethod": "open",
        "procurementMethodDetails": "Below threshold - open competition",
        "mainProcurementCategory": "services",
        "aboveThreshold": false,
        "submissionMethodDetails": "Please only return Tenders by email to the SSRO at: tenders@ssro.gov.uk. The title of the email should be \"SSRO-C-159: Security Assessment and Penetration Test - Quote Submission.\" Tenders must be returned by the date and time specified in the timetable in paragraph 4.4 of the RFQ. Any Quote received after this date and time will not be considered. It is the bidders' responsibility to ensure that their Quote is received no later than the stated date and time.",
        "submissionTerms": {
            "electronicSubmissionPolicy": "notAllowed"
        },
        "tenderPeriod": {
            "endDate": "2026-06-08T17:00:00+01:00"
        },
        "enquiryPeriod": {
            "endDate": "2026-05-26T17:00:00+01:00"
        },
        "otherRequirements": {
            "reservedParticipationLocation": {
                "gazetteer": {
                    "scheme": "GB-ONS",
                    "identifiers": [
                        "K02000001"
                    ]
                }
            }
        },
        "lots": [
            {
                "id": "1",
                "status": "active",
                "value": {
                    "amountGross": 50000,
                    "amount": 41667,
                    "currency": "GBP"
                },
                "awardCriteria": {
                    "criteria": [
                        {
                            "type": "price",
                            "name": "Contract price",
                            "description": "Fixed price for three year contract",
                            "numbers": [
                                {
                                    "number": 100,
                                    "weight": "percentageExact"
                                }
                            ]
                        },
                        {
                            "type": "price",
                            "name": "Contract price",
                            "description": "Fixed price for three year contract",
                            "numbers": [
                                {
                                    "number": 100,
                                    "weight": "percentageExact"
                                }
                            ]
                        }
                    ]
                },
                "suitability": {
                    "sme": true
                },
                "contractPeriod": {
                    "startDate": "2026-06-29T00:00:00+01:00",
                    "endDate": "2028-06-28T23:59:59+01:00",
                    "maxExtentDate": "2029-06-28T23:59:59+01:00"
                },
                "hasRenewal": true,
                "renewal": {
                    "description": "One optional extension of twelve months exercisable at the SSRO's discretion"
                }
            }
        ],
        "documents": [
            {
                "id": "A-16368",
                "documentType": "biddingDocuments",
                "description": "Request for Quote",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16368",
                "format": "application/pdf"
            },
            {
                "id": "A-16369",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 1: Service Specification",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16369",
                "format": "application/pdf"
            },
            {
                "id": "A-16370",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 2: Quote Schedule",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16370",
                "format": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
            },
            {
                "id": "A-16371",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 3: SSRO Terms and Conditions",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16371",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "A-16372",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 4: Form of Quote",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16372",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "A-16373",
                "documentType": "biddingDocuments",
                "description": "Request for Quote - Appendix 5: Conflict of Interest Schedule",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-16373",
                "format": "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
            },
            {
                "id": "045916-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/045916-2026",
                "datePublished": "2026-05-19T17:16:46+01:00",
                "format": "text/html"
            },
            {
                "id": "A-17005",
                "documentType": "biddingDocuments",
                "description": "Supplier clarification questions and SSRO responses",
                "url": "https://www.find-tender.service.gov.uk/Notice/Attachment/A-17005",
                "format": "application/pdf"
            },
            {
                "id": "051600-2026",
                "documentType": "tenderNotice",
                "noticeType": "UK4",
                "description": "Tender notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/051600-2026",
                "datePublished": "2026-06-01T17:25:58+01:00",
                "format": "text/html"
            }
        ],
        "amendments": [
            {
                "id": "051600-2026",
                "description": "Supplier clarification questions and SSRO response document added."
            }
        ]
    },
    "language": "en"
}