---
title: "Provision of Penetration Testing"
ocid: "ocds-r6ebe6-0000843120"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000843120"
markdown_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000843120.md"
json_url: "https://d3tenders.com/contract/ocds-r6ebe6-0000843120.json"
source: "Public Contracts Scotland"
current_stage: "Award"
buyer: "Scottish Fire and Rescue Service"
published: "2026-09-23"
---

# Provision of Penetration Testing

Buyer: Scottish Fire and Rescue Service  
Current stage: Award  
OCID: ocds-r6ebe6-0000843120

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000843120)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-r6ebe6-0000843120.json)

## Summary

Scottish Fire and Rescue Service procured independent penetration testing of its ICT estate. The work is to identify and assess vulnerabilities, then provide actionable recommendations to improve vulnerability management. Its purpose is to strengthen protection against cyber threats, improve security maturity, and help the service prioritise and address vulnerabilities according to real-world risk and exploitability. This is cyber security testing and consultancy (CPV 72820000), delivered for the service in Scotland. Scotland Excel managed the procurement on the service’s behalf but is not a party to, or manager of, the resulting contract.

The procurement is complete and the contract was awarded to CyberLab Security Limited. The contract is active and was signed on 16 September 2026, at a value of £51,000. The competition was run as an open procedure under the Scottish Government’s dynamic purchasing system for cyber security and resilience services, with participation restricted to suppliers that had responded to the earlier expression of interest; all such suppliers were invited to bid. Nine bids were received. The process covered one lot. No award date, contract duration or evaluation criteria are stated in the available process information.

This award shows demand from Scottish Fire and Rescue Service for independent penetration testing that produces practical, risk-based recommendations, rather than vulnerability findings alone. A credible competitor for the same requirement would need to assess a public service’s ICT estate, identify vulnerabilities in the context of real-world threats and exploitability, and help the buyer prioritise remediation and strengthen ongoing vulnerability management. The work also calls for an understanding of cyber security maturity and the resilience of digital infrastructure. The contract was awarded through a dynamic purchasing system, following an expression-of-interest stage, so suppliers would need to qualify for the relevant cyber security and resilience route and be able to compete in a call-off competition. The nine bids indicate competition for this requirement.

## Notice

Call off from Lot 4 - "Cyber Security and Resilience Services" of the Scottish Government Dynamic Purchasing System (DPS) for the provision of Penetration Testing. Competition run via PCS-T. The purpose of this requirement is to provide independent assessment of SFRS's ICT estate vulnerabilities and providing actionable recommendations to support continuous improvement in vulnerability management. The requirement is critical to maintaining the security and resilience of SFRS digital infrastructure and will support the organisation in: -Strengthening protection against evolving cyber threats - Improving overall cyber security maturity - Ensuring vulnerabilities are identified, prioritised, and addressed based on real world risk and exploitability Participation in this tender was restricted to suppliers that responded to the Expression of Interest under reference ITT_62970, all of whom were invited to submit a bid.

### Lot Information

Lot 1

Call off from Lot 4 - "Cyber Security and Resilience Services" of the Scottish Government Dynamic Purchasing System (DPS) for the provision of Penetration Testing. Competition run via PCS-T. Only suppliers that responded to the expression of interest were invited to participate in this procurement.. Scotland Excel was acting on behalf of Scottish Fire and Rescue Service in the execution of this tender but will not be party to the contract or the management of the contract throughout its lifetime.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Public Contracts Scotland |
| Latest notice | https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=SEP565122 |
| Notice type | PCS Notice - Website Contract Award Notice |
| Procurement type | Dynamic |
| Procurement category | Services |
| Procurement method | Open |
| Procurement method details | Open procedure |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 23 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £51,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Not specified |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Scottish Fire and Rescue Service |
| Locality | CAMBUSLANG |
| Postcode area | Glasgow |
| Postcode | G72 7NA |
| Country | Scotland |
| ITL 1 | TLM Scotland |
| ITL 2 | TLM9 Southern Scotland |
| ITL 3 | TLM95 South Lanarkshire |
| Local authority | South Lanarkshire |
| Electoral ward | Cambuslang East |
| Westminster constituency | Rutherglen |
| Delivery location | TLM Scotland |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | CYBERLAB SECURITY LIMITED |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72820000 - Computer testing services

## Release History

- 23 Sep 2026 at 01:00 - Award - PCS Notice - Website Contract Award Notice - https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=SEP565122

## Documents

- https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=SEP565122
  Provision of Penetration Testing - Call off from Lot 4 - "Cyber Security and Resilience Services" of the Scottish Government Dynamic Purchasing System (DPS) for the provision of Penetration Testing. Competition run via PCS-T. The purpose of this requirement is to provide independent assessment of SFRS's ICT estate vulnerabilities and providing actionable recommendations to support continuous improvement in vulnerability management. The requirement is critical to maintaining the security and resilience of SFRS digital infrastructure and will support the organisation in: -Strengthening protection against evolving cyber threats - Improving overall cyber security maturity - Ensuring vulnerabilities are identified, prioritised, and addressed based on real world risk and exploitability Participation in this tender was restricted to suppliers that responded to the Expression of Interest under reference ITT_62970, all of whom were invited to submit a bid.

## Notice URLs

- http://
- http://firescotland.gov.uk
- https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000843120

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-r6ebe6-0000843120. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-r6ebe6-0000843120.json.