--- title: "SSRO Security Assessment and Penetration Test" ocid: "ocds-h6vhtk-069c47" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069c47" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-069c47.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-069c47.json" source: "Find A Tender Service" current_stage: "Tender" buyer: "SINGLE SOURCE REGULATIONS OFFICE" published: "2026-06-01" --- # SSRO Security Assessment and Penetration Test Buyer: SINGLE SOURCE REGULATIONS OFFICE Current stage: Tender OCID: ocds-h6vhtk-069c47 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069c47) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-069c47.json) ## Summary The Single Source Regulations Office (SSRO) is inviting tenders for its Security Assessment and Penetration Testing services as part of an open competition procurement process. The procurement, titled "SSRO Security Assessment and Penetration Test," falls under the IT services category and is valued at £50,000. The SSRO, based in London, is a central government public authority located at 100 Parliament Street, is managing this active tender aimed at enhancing its security measures. The procurement method is below the threshold and includes stages such as security assessments and vulnerability retesting planned for the second half of 2026. Interested parties must submit their tenders via email by 8th June 2026, with a detailed timetable and specifications outlined in the request for quote documents. This tender presents significant opportunities for businesses specialising in IT services, specifically those experienced in security assessments and penetration testing. Given the three-year contract (with an additional optional twelve-month extension) and the focus on addressing vulnerabilities within IT infrastructures, firms with expertise in cyber security, consulting, and support are well-suited to compete. Notably, the project is designed to be inclusive of small and medium enterprises (SMEs), which further expands the opportunities for a diverse range of suppliers to engage in a high-profile government contract. Successful participation could bolster business growth, offering a foothold into government contracts and showcasing capabilities in managing critical infrastructure projects. ## Notice The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026. ### Lot Information Lot 1 Renewal: One optional extension of twelve months exercisable at the SSRO's discretion ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/051600-2026 | | Notice type | UK4 - Tender Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Open | | Procurement method details | Below threshold - open competition | | Tender suitability | SME | | Awardee scale | Not specified | | All stages | Tender | ## Dates | Field | Value | | --- | --- | | Publication date | 1 Jun 2026 | | Submission deadline | 8 Jun 2026 | | Future notice date | Not specified | | Award date | Not specified | | Contract period | 28 Jun 2026 - 28 Jun 2028 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £41,667 | | Lots value | £41,667 | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Active | | Lots status | Active | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | SINGLE SOURCE REGULATIONS OFFICE | | Locality | LONDON | | Post town | South West London | | Postcode | SW1A 2BQ | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI3 Inner London - West | | ITL 3 | TLI35 Westminster and City of London | | Local authority | Westminster | | Electoral ward | St James's | | Westminster constituency | Cities of London and Westminster | | Delivery location | TLI London | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72000000 - IT services: consulting, software development, Internet and support ## Release History - 1 Jun 2026 at 16:25 - TenderUpdate - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/051600-2026 - 19 May 2026 at 16:16 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/045916-2026 ## Documents - https://www.find-tender.service.gov.uk/Notice/051600-2026 1st June 2026 - Tender notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/045916-2026 19th May 2026 - Tender notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16368 Request for Quote - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16369 Request for Quote - Appendix 1: Service Specification - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16370 Request for Quote - Appendix 2: Quote Schedule - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16371 Request for Quote - Appendix 3: SSRO Terms and Conditions - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16372 Request for Quote - Appendix 4: Form of Quote - https://www.find-tender.service.gov.uk/Notice/Attachment/A-16373 Request for Quote - Appendix 5: Conflict of Interest Schedule - https://www.find-tender.service.gov.uk/Notice/Attachment/A-17005 Supplier clarification questions and SSRO responses ## Notice URLs - https://www.legislation.gov.uk/ukpga/2023/54/contents - https://www.ssro.gov.uk/ ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-069c47. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-069c47.json.