---
title: "Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services"
ocid: "ocds-h6vhtk-06e59c"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e59c"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06e59c.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06e59c.json"
source: "Find A Tender Service"
current_stage: "Tender"
buyer: "City of Bradford Metropolitan District Council"
published: "2026-08-17"
---

# Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

Buyer: City of Bradford Metropolitan District Council  
Current stage: Tender  
OCID: ocds-h6vhtk-06e59c

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e59c)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06e59c.json)

## Summary

City of Bradford Metropolitan District Council is procuring information security consultancy services covering ad-hoc penetration testing, IT Health Checks for Public Services Network (PSN) compliance, and related security testing and advice. The work is intended to identify weaknesses arising from publicly known vulnerabilities, common configuration faults and poor cyber awareness. Testing must cover both internal and external environments and use automated and manual methods. The requirement includes blocks of 10 consultancy days that can be used for different security-related testing and consultancy activities. Delivery is for the Council in Bradford and elsewhere in the United Kingdom. The services fall within IT consultancy, computer support, auditing and testing.

The procurement has reached tender: the Council invited offers through an open procedure. It is a single-lot opportunity and is intended to establish an open framework with up to three providers. The tender value is £250,273 excluding VAT, or £300,327 including VAT. Enquiries close at 16:00 on 4 September 2026, and offers must be submitted by 16:00 on 14 September 2026. The award decision is due by 16 November 2026. The initial contract period is 16 November 2026 to 15 November 2034, incorporating framework arrangements and possible changes of suppliers. Evaluation is based on price at 50%, quality at 40% and social value at 10%.

This opportunity suits experienced and suitably qualified cyber security providers offering penetration testing, infrastructure and application vulnerability assessment, PSN compliance checks, IT health checks and security consultancy. Suppliers should be able to combine automated scanning with manual testing and apply recognised good practice, including approaches from the National Cyber Security Centre and the Open Web Application Security Project. Strong technical capability is needed to identify publicly known vulnerabilities, configuration weaknesses and poor cyber awareness across internal and external environments, then provide usable consultancy through blocks of 10 days. The framework is suitable for small and medium-sized enterprises and voluntary, community or social enterprises, with competition also dependent on economic and technical selection requirements.

## Notice

The Council is seeking to appoint a suitably experienced and qualified Provider (the Provider) to deliver These vulnerability tests must make use of both automated and manual testing and using best practice strategies from NCSC (National Cyber Security Centre), Open Web Application Security Project (OWASP) etc, to undertake our PEN testing. This tender is for the multiple block purchases of 10 consultancy days which can be used for a variety of security related testing and consultancy intended to identify weaknesses utilising publicly known vulnerabilities, common configuration faults or poor cyber awareness. Including our IT Health Check for PSN compliance (both Internally and Externally). The Council anticipates (but does not guarantee) that it will enter into a Framework Contract with the top 3 successful Providers. The Framework will be established as an Open Framework under the Procurement Act 2023. The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term. The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements. The successor framework is intended to have a term of twelve (12) months The Council reserves the right to amend the scope of the support requirement and procure additional requirements as and when required throughout the term of the contract.

### Lot Information

Lot LOT-0000

Options: Open Framework - possible change of suppliers

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/078110-2026 |
| Notice type | UK4 - Tender Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | SME, VCSE |
| Awardee scale | Not specified |
| All stages | Tender |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 17 Aug 2026 |
| Submission deadline | 14 Sep 2026 |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 16 Nov 2026 - 15 Nov 2034 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £250,273 |
| Lots value | £250,273 |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Active |
| Lots status | Active |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | City of Bradford Metropolitan District Council |
| Locality | BRADFORD |
| Postcode area | Bradford |
| Postcode | BD1 1HX |
| Country | England |
| ITL 1 | TLE Yorkshire and The Humber |
| ITL 2 | TLE4 West Yorkshire |
| ITL 3 | TLE41 Bradford |
| Local authority | Bradford |
| Electoral ward | City |
| Westminster constituency | Bradford West |
| Delivery location | TLE Yorkshire and The Humber, TLE41 Bradford |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support
- 72600000 - Computer support and consultancy services
- 72800000 - Computer audit and testing services

## Release History

- 17 Aug 2026 at 13:01 - Tender - UK4 - Tender Notice - https://www.find-tender.service.gov.uk/Notice/078110-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/078110-2026
  17th August 2026 - Tender notice on Find a Tender

## Notice URLs

- https://uk.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=108256&TID100113322&B=
- https://www.bradford.gov.uk/
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e59c. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06e59c.json.