Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

City of Bradford Metropolitan District Council

This public procurement record has 1 release in its history.

Tender

17 Aug 2026 at 13:01

Summary of the contracting process

City of Bradford Metropolitan District Council is procuring information security consultancy services covering ad-hoc penetration testing, IT Health Checks for Public Services Network (PSN) compliance, and related security testing and advice. The work is intended to identify weaknesses arising from publicly known vulnerabilities, common configuration faults and poor cyber awareness. Testing must cover both internal and external environments and use automated and manual methods. The requirement includes blocks of 10 consultancy days that can be used for different security-related testing and consultancy activities. Delivery is for the Council in Bradford and elsewhere in the United Kingdom. The services fall within IT consultancy, computer support, auditing and testing.

The procurement has reached tender: the Council invited offers through an open procedure. It is a single-lot opportunity and is intended to establish an open framework with up to three providers. The tender value is £250,273 excluding VAT, or £300,327 including VAT. Enquiries close at 16:00 on 4 September 2026, and offers must be submitted by 16:00 on 14 September 2026. The award decision is due by 16 November 2026. The initial contract period is 16 November 2026 to 15 November 2034, incorporating framework arrangements and possible changes of suppliers. Evaluation is based on price at 50%, quality at 40% and social value at 10%.

This opportunity suits experienced and suitably qualified cyber security providers offering penetration testing, infrastructure and application vulnerability assessment, PSN compliance checks, IT health checks and security consultancy. Suppliers should be able to combine automated scanning with manual testing and apply recognised good practice, including approaches from the National Cyber Security Centre and the Open Web Application Security Project. Strong technical capability is needed to identify publicly known vulnerabilities, configuration weaknesses and poor cyber awareness across internal and external environments, then provide usable consultancy through blocks of 10 days. The framework is suitable for small and medium-sized enterprises and voluntary, community or social enterprises, with competition also dependent on economic and technical selection requirements.

How relevant is this notice?

Notice Title

Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

Notice Description

The Council is seeking to appoint a suitably experienced and qualified Provider (the Provider) to deliver These vulnerability tests must make use of both automated and manual testing and using best practice strategies from NCSC (National Cyber Security Centre), Open Web Application Security Project (OWASP) etc, to undertake our PEN testing. This tender is for the multiple block purchases of 10 consultancy days which can be used for a variety of security related testing and consultancy intended to identify weaknesses utilising publicly known vulnerabilities, common configuration faults or poor cyber awareness. Including our IT Health Check for PSN compliance (both Internally and Externally). The Council anticipates (but does not guarantee) that it will enter into a Framework Contract with the top 3 successful Providers. The Framework will be established as an Open Framework under the Procurement Act 2023. The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term. The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements. The successor framework is intended to have a term of twelve (12) months The Council reserves the right to amend the scope of the support requirement and procure additional requirements as and when required throughout the term of the contract.

Lot Information

Lot LOT-0000

Options: Open Framework - possible change of suppliers

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06e59c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/078110-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Open procedure
Tender Suitability
SME, VCSE
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72000000 - IT services: consulting, software development, Internet and support

72600000 - Computer support and consultancy services

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
£250,273 £100K-£500K
Lots Value
£250,273 £100K-£500K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
17 Aug 20261 weeks ago
Submission Deadline
14 Sep 20263 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
16 Nov 2026 - 15 Nov 2034 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
City of Bradford Metropolitan District Council
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRADFORD
Postcode
BD1 1HX
Postcode Area
Bradford
Country
England

Major Region (ITL 1)
TLE Yorkshire and The Humber
Basic Region (ITL 2)
TLE4 West Yorkshire
Small Region (ITL 3)
TLE41 Bradford
Delivery Location
TLE Yorkshire and The Humber, TLE41 Bradford

Local Authority
Bradford
Electoral Ward
City
Westminster Constituency
Bradford West

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...