Tender

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Penetration Testing

Senedd Cymru / Welsh Parliament

This public procurement record has 1 release in its history.

Tender

21 Oct 2026 at 11:21

UK4 - Tender Notice
Summary of the contracting process

Senedd Cymru / Welsh Parliament is buying independent penetration testing to assess the security of its technology estate and identify vulnerabilities that could expose it to cyber risk. The work covers planning, carrying out and reporting tests on Commission systems and services. Depending on need, targets may include external and internal infrastructure, web applications, remote access services, wireless technologies and physical locations. Testing may use white-, grey- or black-box approaches. The service is intended to validate security controls, assess resilience and provide prioritised recommendations to address weaknesses. Delivery is for the Senedd Commission in Wales.

The buyer invited offers through an open competition for one lot. The procurement was at tender stage, with bids submitted electronically through the Bravo Solutions e-tendering portal. The enquiry deadline set was 17 November 2026 at 10:00 UTC, and the bid deadline was 24 November 2026 at 10:00 UTC. The contract period is 11 December 2026 to 10 December 2030. The estimated value is £80,000 excluding VAT (£100,000 including VAT). Evaluation gives quality a 60% weighting and contract cost 40%; further details are in the procurement documents.

This opportunity suits penetration-testing and cyber-security firms able to deliver independent, realistic assessments across varied technology environments. Suppliers should be capable of testing infrastructure, applications, remote access, wireless systems and, where required, physical locations, using white-, grey- or black-box methods. The work calls for robust planning and controlled testing that minimises risk to operational services, as well as clear reporting. Strong competitors will be able to identify and validate vulnerabilities, assess whether security controls work effectively, judge resilience against techniques used by malicious actors, and provide prioritised remediation advice that supports continuous improvement. The lot is marked as suitable for small and medium-sized enterprises.

How relevant is this notice?

Notice Information

Notice Title

Penetration Testing

Notice Description

The Senedd is looking to procure a penetration testing service to provide independent assurance over the security of its technology estate and to identify vulnerabilities that may expose the organisation to cyber security risk. The contract will include the planning, execution and reporting of penetration testing activities against Commission systems and services. Testing may include external infrastructure, internal infrastructure, web applications, remote access services, wireless technologies and physical locations as required. These tests may be performed in white, grey, or black box scenarios. The Senedd Commission is seeking to procure an independent penetration testing service capable of identifying vulnerabilities, validating the effectiveness of security controls and providing assurance over the resilience of the Commission's technology estate. The service should provide realistic security assessments that reflect the techniques and methodologies employed by malicious actors, whilst ensuring testing is undertaken in a controlled manner that minimises risk to operational services. The service should support the Commission's cyber security strategy by identifying weaknesses before they can be exploited, providing prioritised remediation recommendations and supporting continuous improvement of the organisation's overall security posture.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-078c98
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/099362-2026
Current Stage
Tender
All Stages
Tender

Procurement Classification

Notice Type
UK4 - Tender Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Open
Procurement Method Details
Below threshold - open competition
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

CPV Codes

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
£80,000 Under £100K
Lots Value
£80,000 Under £100K
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
21 Oct 20266 days ago
Submission Deadline
24 Nov 20264 weeks to go
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
11 Dec 2026 - 10 Dec 2030 4-5 years
Recurrence
Not specified

Notice Status

Tender Status
Active
Lots Status
Active
Awards Status
Not Specified
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Senedd Cymru / Welsh Parliament
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CARDIFF
Postcode
CF99 1SN
Postcode Area
Cardiff
Country
Wales
Major Region (ITL 1)
TLL Wales
Basic Region (ITL 2)
TLL5 South East Wales
Small Region (ITL 3)
TLL52 Cardiff and Vale of Glamorgan
Delivery Location
TLL Wales
Local Authority
Cardiff
Electoral Ward
Butetown
Westminster Constituency
Cardiff South and Penarth

Further Information

Notice Documents

  • https://www.find-tender.service.gov.uk/Notice/099362-2026
    21st October 2026 - Tender notice on Find a Tender
  • https://etenderwales.ukp.app.jaggaer.com/web/login.shtml
    The Procurement documents will be available to access and view on the Bravo Solutions portal. Those suppliers who are not already registered on the portal will need to register. Registration is free and you can do this by going to the following link: https://etenderwales.ukp.app.jaggaer.com/web/login.shtml. The Procurement documents can be found by searching for reference itt_127977 - Penetration Testing.

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...