--- title: "PENETRATION TESTING SERVICES" ocid: "ocds-h6vhtk-04cf69" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04cf69" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-04cf69.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-04cf69.json" source: "Find A Tender Service" current_stage: "Planning" buyer: "NATIONAL ENERGY SYSTEM OPERATOR LIMITED" published: "2025-01-13" --- # PENETRATION TESTING SERVICES Buyer: NATIONAL ENERGY SYSTEM OPERATOR LIMITED Current stage: Planning OCID: ocds-h6vhtk-04cf69 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04cf69) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-04cf69.json) ## Summary National Energy System Operator Limited (NESO), headquartered in Wokingham, UK, has announced the planning stage for their penetration testing services procurement. This contract is valued at £750,000 and falls under the industry category of networking, internet, and intranet software packages. The primary procurement category is goods. NESO aims to establish a penetration testing framework to ensure the security of its systems, with the procurement focusing on a range of services, including infrastructure, web application, API security testing, and simulated attack exercises. All interested suppliers must register with Achilles UVDB using the code 2.1.23-Cyber Security Consulting or Services by 31st January 2025. The procurement method is through the Utilities Contracts Regulations 2016, with an initial three-year contract and the possibility of two one-year extensions. Key future dates include the commencement of the pre-qualification stage in April 2025 and a future notice date set for 31st August 2025. This tender presents significant opportunities for businesses with expertise in cyber security consulting and penetration testing, particularly those with experience in Critical National Infrastructure (CNI) environments. The contract requires suppliers to provide CHECK accredited penetration testers and offers a flexible framework that can adapt to varying business requirements. Companies equipped to deliver comprehensive vulnerability testing and those possessing the necessary UK Government Security Clearances will find this tender particularly advantageous. Given the scale and ongoing transformation of NESO, businesses that can deliver high-quality, timely security solutions will be well-suited to compete for this contract and potentially secure a long-term partnership. ## Notice As part of the separation from National Grid Group and transformation into NESO under UK Government ownership, NESO are looking to create their own penetration testing framework to ensure that we can provide assurance over the security of our systems and provide a secure service to Great Britain. To achieve this, NESO requires a penetration testing panel of at least three members who can provide in-depth penetration testing services, covering a range of localised testing, such as web-app or infrastructure testing, as well as simulated attack exercises. ### Lot Information Lot 1 NESO require a penetration testing service provider that can: Provide Infrastructure, Web Application, API and Web Application security testing. Provide simulated attack exercising services (Purple/Red Teams). Provide CHECK accredited penetration testers to complete testing. Where necessary, provide penetration testers who have achieved UK Gov Security Clearance Provide highly accurate reporting of vulnerabilities within the in-scope systems. Provide resource for testing with a no longer than 1 month lead time. Provide resource with knowledge and experience of testing on Critical National Infrastructure (CNI) environments, and the risk associated, where applicable to the scope of testing. Additional information: Contract duration Flexible, agile framework contract that can be scaled-up or down based on business requirements. Compliance with the Utilities Contracts Regulations 2016 Initial contract duration 3-year contract, with the possibility for 2 one year contract extensions Participation requirements: All suppliers wishing to participate in the tender process must register with Achilles via the UVDB code 2.1.23-Cyber security consulting or services for the event by the 31st January 2025. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/000974-2025 | | Notice type | Planning Notice | | Procurement type | Standard | | Procurement category | Goods | | Procurement method | Not Specified | | Procurement method details | Not specified | | Tender suitability | Not specified | | Awardee scale | Not specified | | All stages | Planning | ## Dates | Field | Value | | --- | --- | | Publication date | 13 Jan 2025 | | Submission deadline | 31 Jan 2025 | | Future notice date | 30 Aug 2025 | | Award date | Not specified | | Contract period | Not specified | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £750,000 | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Planned | | Lots status | Planned | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | NATIONAL ENERGY SYSTEM OPERATOR LIMITED | | Locality | WOKINGHAM | | Post town | Reading | | Postcode | RG41 5BN | | Country | England | | ITL 1 | TLJ South East (England) | | ITL 2 | TLJ1 Berkshire, Buckinghamshire and Oxfordshire | | ITL 3 | TLJ16 Berkshire West | | Local authority | Wokingham | | Electoral ward | Winnersh | | Westminster constituency | Wokingham | | Delivery location | Not specified | ## CPV Codes ### Divisions - 48 - Software package and information systems ### Codes - 48200000 - Networking, Internet and intranet software package - 48400000 - Business transaction and personal business software package - 48500000 - Communication and multimedia software package ## Release History - 13 Jan 2025 at 09:30 - Planning - Planning Notice - https://www.find-tender.service.gov.uk/Notice/000974-2025 ## Notice URLs - https://www.neso.energy/about-neso ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-04cf69. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-04cf69.json.